The product uses default credentials (such as passwords or cryptographic keys) for potentially critical functionality.
108 vulnerabilities with CWE-1392
CVE-2026-68503
CRITICAL
LazyOwn: Default C2 Operator Credentials Enable Administrative Access to C2 Dashboard
CVSS 9.8
CVE-2026-41939
CRITICAL
Care Everywhere Gateway 14.3.10 Hard-coded Credentials RCE via WildFly
CVSS 9.8
CVE-2026-44761
CRITICAL
Insecure Sample Credentials in SAP Commerce Cloud
CVSS 9.1
CVE-2026-3144
HIGH
IBM API Connect Default Credentials
CVSS 8.1
CVE-2026-58466
CRITICAL
AutoBangumi < 3.2.8 - Hard-coded Default Credentials via add_default_user()
CVSS 9.8
CVE-2026-58453
CRITICAL
JAIOTlink C492A-W6 4.8.30.57701411 Hard-coded Credentials via anyka_ipc
CVSS 9.8
CVE-2026-46386
CRITICAL
OpenProject: Pre-authentication RCE in openproject/openproject Docker image via default `SECRET_KEY_BASE=OVERWRITE_ME` and `cookies_serializer = :marshal`
CVSS 9.9
CVE-2026-44273
MEDIUM
Dell Wyse Management Suite (wms) < 2605 - Use of Default Credentials
CVSS 6.0
CVE-2026-32652
HIGH
Dell AIOps < 1.18.3 or later - Use of Default Credentials
CVSS 7.8
CVE-2026-50005
HIGH
Brickcom Cameras Use of Default Credentials
CVSS 7.7
CVE-2026-9844
HIGH
Roche navify Digital Pathology 2.0.0 to Before 2.4.1 - Default Credentials
CVE-2026-42941
HIGH
MacGregor Voyage Data Recorder (VDR) G4e Use of Default Credentials
CVSS 8.3
CVE-2026-45039
CRITICAL
RustFS: Internode RPC HMAC secret falls back to public default credential, enabling peer impersonation
CVSS 9.8
CVE-2026-7365
HIGH
IBM Operations Analytics - Log Analysis is affected by Information disclosure due to default passwords not being forced to be changed on post-installation
CVSS 8.4
CVE-2026-44159
CRITICAL
Tyler Identity Local (TID-L) default administrative credentials
CVSS 9.8
CVE-2026-7428
CRITICAL
Insecure default administrative credentials in AlloyDB for PostgreSQL
CVE-2026-42072
CRITICAL
Nornicdb: Improper Network Binding in NornicDB Bolt Server allows unauthorized remote access
CVSS 9.8
CVE-2026-31837
HIGH
Istio <1.29.1/1.28.5/1.27.8 - Auth Bypass
CVSS 7.5
CVE-2026-28713
HIGH
Acronis Cyber Protect - Auth Bypass
CVSS 7.1
CVE-2026-22886
CRITICAL
Eclipse OpenMQ - Use of Weak Credentials via Default Admin Account
CVSS 9.8
CVE-2026-27751
CRITICAL
SODOLA SL902-SWTGW124AS <200.1.20 - Auth Bypass
CVSS 9.8
CVE-2026-26341
CRITICAL
Tattile Smart+/Vega/Basic <1.181.5 - Auth Bypass
CVSS 9.8
CVE-2026-26366
CRITICAL
eNet SMART HOME 2.2.1/2.3.1 - Auth Bypass
CVSS 9.8
CVE-2026-1972
MEDIUM
Edimax BR-6208AC 2_1.02 - Info Disclosure
CVSS 5.3
CVE-2026-1803
HIGH
Ziroom ZHOME A0101 1.0.1.0 - Default Credentials
CVSS 8.1
Details
Vulnerabilities
108