CWE-1188

Initialization of a Resource with an Insecure Default

Parent: CWE-1419 - Incorrect Initialization of Resource

The product initializes or sets a resource with a default that is intended to be changed by the product's installer, administrator, or maintainer, but the default is not secure.

261 vulnerabilities with CWE-1188
CVE-2025-54127 CRITICAL
HAXcms <11.0.6 - Auth Bypass
CVSS 9.8
CVE-2025-44647 HIGH
TRENDnet TEW-WLC100P 2.03b03 - Info Disclosure
CVSS 7.3
CVE-2025-25271 HIGH
Phoenixcontact Phoenix Contact CHARX SEC Firmware <= 1.7.3 - Insecure Default Configuration
CVSS 8.8
CVE-2025-41672 CRITICAL
Default Certificates - Unauthenticated RCE
CVSS 10.0
CVE-2025-53602 MEDIUM
Zipkin <3.5.1 - Info Disclosure
CVSS 5.3
CVE-2025-24288 CRITICAL
Versa Director - Info Disclosure
CVSS 9.8
CVE-2025-41438 CRITICAL
CS5000 Fire Panel - Privilege Escalation
CVSS 9.8
CVE-2025-48927 MEDIUM KEV
TeleMessage - Info Disclosure
CVSS 5.3
CVE-2025-47945 CRITICAL
Donetick <0.1.44 - Auth Bypass
CVSS 9.1
CVE-2025-31930 HIGH
IEC 1Ph 7.4kW - Info Disclosure
CVSS 8.8
CVE-2025-22248 HIGH
bitnami/pgpool & bitnami/postgres-ha - Info Disclosure
CVSS 7.5
CVE-2025-46599 MEDIUM
CNCF K3s <1.32.4-rc1+k3s1 - Info Disclosure
CVSS 6.8
CVE-2025-1863 CRITICAL
Yokogawa Electric Corporation - Info Disclosure
CVSS 9.8
CVE-2025-43015 HIGH
JetBrains RubyMine <2025.1 - RCE
CVSS 8.3
CVE-2025-2442 MEDIUM
Unknown - Info Disclosure
CVSS 6.8
CVE-2025-2441 MEDIUM
Initialization of a Resource with an Insecure Default - Info Disclo...
CVSS 4.6
CVE-2025-27443 LOW
Zoom Workplace Apps for Windows - Info Disclosure
CVSS 2.8
CVE-2025-29985 MEDIUM
Dell CEE 9.0.0.0 - Info Disclosure
CVSS 6.5
CVE-2025-27809 MEDIUM
Mbed TLS <2.28.10 & <3.6.3 - SSL/TLS
CVSS 5.4
CVE-2025-1960 CRITICAL
WebHMI - Code Injection
CVSS 9.8
CVE-2025-2129 MEDIUM
Mage AI <0.9.75 - Info Disclosure
CVSS 5.6
CVE-2024-8313 HIGH
B&R APROL <4.4-00P5 - Info Disclosure
CVE-2024-41975 MEDIUM
PLC - Info Disclosure
CVSS 5.3
CVE-2024-50390 CRITICAL
Qnap Qurouter - Command Injection
CVSS 9.8
CVE-2024-48122 MEDIUM
HI-SCAN 6040i - Privilege Escalation
CVSS 6.7
Details
Vulnerabilities 261