CVE-2022-26516

Authorized users may install a maliciously modified package file when updating the device via the web user interface. The user may inadvertently use a package file obtained from an unauthorized source or a file that was compromised between download and deployment.

• CWE-345

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-104-03Mitigation, Third Party Advisory, US Government Resource
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-104-03Mitigation, Third Party Advisory, US Government Resource

Published

Apr 20, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-26510A firmware update vulnerability exists in the iburn firmware…6.5
• CVE-2022-26511WPS Presentation 11.8.0.5745 insecurely load d3dx9_41.dll wh…7.8
• CVE-2022-26512Uncontrolled search path element in the Intel(R) FPGA Add-on…7.3
• CVE-2022-26513Out-of-bounds write in some Intel(R) XMM(TM) 7560 Modem soft…9.6
• CVE-2022-26514Delta Electronics DIAEnergie (All versions prior to 1.8.02.0…9.8
• CVE-2022-26515Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2022-26517On F5 BIG-IP 15.1.x versions prior to 15.1.5.1, 14.1.x versi…7.5
• CVE-2022-26518An OS command injection vulnerability exists in the console …8.8
• CVE-2022-26519There is no limit to the number of attempts to authenticate …5.5
• CVE-2022-2652Depending on the way the format strings in the card label ar…6
• CVE-2022-26520In pgjdbc before 42.3.3, an attacker (who controls the jdbc …9.8
• CVE-2022-26521Abantecart through 1.3.2 allows remote authenticated adminis…7.2