authentication

High-severity hardcoded credentials vulnerability in the CP Plus CP-XR-DE21-S Router allows an attacker with local network access to obtain shared HTTP Digest authentication credentials and gain unauthorized administrative access.

How inconsistent email normalization between the rate limiter and delivery logic allows unlimited OTP requests — a classic normalization-mismatch bug.