CVE-2026-22312 — The device has a webserver that exposes a REST API authenticated with a constant token. The unauthenticated API can be used by an attacker to get access to system settings, modify the configuration — CVE Database · The Intelligence Room