CWE-1392

Use of Default Credentials

Parent: CWE-1391 - Use of Weak Credentials

The product uses default credentials (such as passwords or cryptographic keys) for potentially critical functionality.

108 vulnerabilities with CWE-1392
CVE-2026-22273 HIGH
Dell ECS <3.8.1.7 & Dell ObjectScale <4.2.0.0 - Privilege Escalation
CVSS 8.8
CVE-2025-36221 MEDIUM
Vulnerabilities exists in IBM Cloud Pak for Data System (CPDS 1.0) - Cyclops.
CVSS 5.3
CVE-2025-54756 HIGH
BrightSign OS <8.5.53.1,9.0.166 - Info Disclosure
CVSS 8.4
CVE-2025-7740 HIGH
Hitachi Energy SuprOS 9.0.0-9.2.2.0 - Use of Default Credentials
CVE-2025-59108 CRITICAL
Access Manager - Info Disclosure
CVE-2025-58744 HIGH
Milner ImageDirector Capture <7.6.3.25808 - Default Credentials
CVSS 7.5
CVE-2025-54303 CRITICAL
Thermo Fisher Torrent Suite Django 5.18.1 - Info Disclosure
CVSS 9.8
CVE-2025-12592 CRITICAL
Legacy Vivotek Device - Info Disclosure
CVE-2025-12218 CRITICAL
BLU-IC2, IC4 <1.19.5 - Info Disclosure
CVSS 9.1
CVE-2025-12217 CRITICAL
BLU-IC2 and BLU-IC4 Firmware < 1.20 - Use of Default SNMP Community String
CVSS 9.1
CVE-2025-10678 CRITICAL
NetBird < 0.57.0 - Use of Default Credentials in Admin Account
CVE-2025-11943 HIGH
70mai X200 <20251010 - Default Credentials
CVSS 7.3
CVE-2025-34516 CRITICAL
Ilevia EVE X1 Server <4.7.18.0.eden - Default Credentials
CVSS 9.8
CVE-2025-10542 CRITICAL
iMonitor EAM 9.63.94 - Use of Default Credentials
CVSS 9.8
CVE-2025-35042 CRITICAL
Airship AI Acropolis - Privilege Escalation
CVSS 9.8
CVE-2025-55110 MEDIUM
BMC Control-M/Agent - Use of Default Credentials in Keystore
CVSS 5.5
CVE-2025-55051 CRITICAL
Default Credentials - Info Disclosure
CVSS 10.0
CVE-2025-35452 CRITICAL
PTZOptics PT12x-SDI-XX-G2 and other ValueHD-based Cameras - Use of Default Credentials
CVSS 9.8
CVE-2025-9577 LOW
TOTOLINK X2000R <2.0.0 - Use After Free
CVSS 2.5
CVE-2025-9576 LOW
seeedstudio ReSpeaker LinkIt7688 - Default Credentials
CVSS 2.5
CVE-2025-35114 HIGH
Agiloft 19-28 - Use of Default Credentials
CVSS 7.5
CVE-2025-29525 MEDIUM
DASAN GPON ONU H660WM OS - Info Disclosure
CVSS 5.3
CVE-2025-29521 MEDIUM
D-Link DSL-7740C - Privilege Escalation
CVSS 5.3
CVE-2025-55740 MEDIUM
Anipaleja nginx-defender < 1.5.0 - Use of Default Credentials
CVSS 6.5
CVE-2025-2184 MEDIUM
Palo Alto Networks Cortex XDR - Info Disclosure
Details
Vulnerabilities 108