Skip to content
Noroxi

CWE-1391 · 55 records

Use of Weak Credentials

CVEs in this class

55 records

  • CVE-2024-51978
    60This week

    Authentication bypass via default password generation affecting multiple models from Brother Industries, Ltd, Toshiba Tec, and Konica Minolta, Inc.

    CriticalCVSS 9.8WeaponizedEPSS 15%

    brother industries, ltd · dcp-j928n-w/bJun 25, 2025

  • CVE-2024-12728
    39Monitor

    A weak credentials vulnerability potentially allows privileged system access via SSH to Sophos Firewall older than version 20.0 MR3 (20.0.3)

    CriticalCVSS 9.8No exploitEPSS 0%

    sophos · firewall firmwareDec 19, 2024

  • CVE-2025-6077
    39Monitor

    Partner Software's Partner Software Product and corresponding Partner Web application use the same default username and password for the adm

    CriticalCVSS 9.8No exploitEPSS 0%

    partner software · partner webAug 1, 2025

  • CVE-2022-46738
    39Monitor

    The affected product exposes multiple sensitive data fields of the affected product.

    CriticalCVSS 9.8No exploitEPSS 0%

    dataprobe · iboot-pdu4-n20 firmwareMay 22, 2023

  • CVE-2023-31240
    39Monitor

    Snap One OvrC Pro versions prior to 7.2 have their own locally running web server accessible both from the local network and remotely.

    CriticalCVSS 9.8No exploitEPSS 0%

    snapone · orvcMay 22, 2023

  • CVE-2025-67114
    39Monitor

    Use of a deterministic credential generation algorithm in /ftl/bin/calc_f2 in Small Cell Sercomm SCE4255W (FreedomFi Englewood) firmware bef

    CriticalCVSS 9.8No exploitEPSS 0%

    Mar 19, 2026

  • CVE-2026-22886
    39Monitor

    OpenMQ exposes a TCP-based management service (imqbrokerd) that by default requires authentication.

    CriticalCVSS 9.8No exploitEPSS 0%

    eclipse · openmqMar 3, 2026

  • CVE-2023-0635
    39Monitor

    Privilege escalation to root

    CriticalCVSS 9.8No exploitEPSS 0%

    abb · aspect-ent-2 firmwareJun 5, 2023

  • CVE-2025-6523
    38Monitor

    Use of weak credentials in emergency authentication component in Devolutions Server allows an unauthenticated attacker to bypass authenticat

    CriticalCVSS 9.5No exploitEPSS 0%

    devolutions · devolutions serverJul 22, 2025

  • CVE-2025-30519
    37Monitor

    Dover Fueling Solutions ProGauge MagLink LX4 Devices Use of Weak Credentials

    CriticalCVSS 9.3No exploitEPSS 0%

    dover fueling solutions · progauge maglink lx 4Sep 18, 2025

  • CVE-2024-43698
    37Monitor

    Kieback&Peter DDC4000 Series Use of Weak Credentials

    CriticalCVSS 9.3No exploitEPSS 0%

    kieback&peter · ddc4040eOct 22, 2024

  • CVE-2026-109321
    37Monitor

    Grav Login OAuth Plugin before 1.4.3 Predictable Local Credentials Authentication Bypass

    CriticalCVSS 9.3No exploitEPSS 0%

    getgrav · grav-plugin-login-oauthOct 12, 2026

  • CVE-2026-8076
    37Monitor

    Weak credentials vulnerability in the CashDro 3 web administration panel

    CriticalCVSS 9.3No exploitEPSS 0%

    cashdro · cashdro 3 administration panelMay 8, 2026

  • CVE-2026-22094
    37Monitor

    Weak root password in EVbee DC 80

    CriticalCVSS 9.3No exploitEPSS 0%

    evbee · dc 80Sep 29, 2026

  • CVE-2026-22910
    36Monitor

    The device is deployed with weak and publicly known default passwords for certain hidden user levels, increasing the risk of unauthorized ac

    CriticalCVSS 9.1No exploitEPSS 0%

    sick · tdc-x401gl firmwareJan 15, 2026

  • CVE-2025-59103
    36Monitor

    Weak Default Passwords for SSH Access in dormakaba access manager

    CriticalCVSS 9.2No exploitEPSS 0%

    dormakaba · access manager 92xx-k5Jan 26, 2026

  • CVE-2023-48257
    35Monitor

    The vulnerability allows a remote attacker to access sensitive data inside exported packages or obtain up to Remote Code Execution (RCE) wit

    HighCVSS 8.8No exploitEPSS 0%

    bosch · nexo-osJan 10, 2024

  • CVE-2024-29071
    35Monitor

    HGW BL1500HM Ver 002.001.013 and earlier contains a use of week credentials issue.

    HighCVSS 8.8No exploitEPSS 0%

    kddi corporation · hgw bl1500hmMar 25, 2024

  • CVE-2025-53558
    34Monitor

    ZXHN-F660T and ZXHN-F660A provided by ZTE Japan K.K.

    HighCVSS 8.7Proof of conceptEPSS 1%

    zte japan. k.k. · zxhn-f660tJul 31, 2025

  • CVE-2026-35089
    34Monitor

    Use of Weak Credentials in Slican telephone exchanges

    HighCVSS 8.7No exploitEPSS 0%

    slican · ipxMay 27, 2026

  • CVE-2025-35970
    34Monitor

    On multiple products of SEIKO EPSON and FUJIFILM Corporation, the initial administrator password is easy to guess from the information avail

    HighCVSS 8.7No exploitEPSS 0%

    seiko epson · multiple epson productAug 7, 2025

  • CVE-2024-45722
    34Monitor

    Ruijie Reyee OS Use of Weak Credentials

    HighCVSS 8.7No exploitEPSS 0%

    ruijienetworks · reyee osDec 6, 2024

  • CVE-2024-5634
    34Monitor

    Longse model LBH30FE200W cameras, as well as products based on this device, make use of telnet passwords which follow a specific pattern.

    HighCVSS 8.6No exploitEPSS 0%

    longse technology · lbh30fe200wJul 9, 2024

  • CVE-2025-2229
    34Monitor

    Philips Intellispace Cardiovascular (ISCV) Use of Weak Credentials

    HighCVSS 8.5No exploitEPSS 0%

    philips · intellispace cardiovascular (iscv)Mar 13, 2025

  • CVE-2026-23853
    33Monitor

    Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release ver

    HighCVSS 8.4No exploitEPSS 0%

    dell · powerprotect dp series applianceApr 17, 2026

All vulnerability classes