CWE-1392 · 120 records
Use of Default Credentials
CVEs in this class
121 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2026-100103No exploit | Authentication bypass via default auth token in P4Searchperfoce · p4 (helix core) · CWE-1392 | Critical10.0 | — | 0.4% | Oct 5, 2026 |
40Plan | CVE-2025-55051No exploit | CWE-1392: Use of Default Credentialsbaicells · nova430e/430i, nova436q, neutrino430, nova846 · CWE-1392 | Critical10.0 | — | 0.3% | Sep 9, 2025 |
40Plan | CVE-2025-12218No exploit | Weak Default Credentialsazure-access · blu-ic2 firmware · CWE-1392 | Critical10.0 | — | 0.2% | Oct 25, 2025 |
40Plan | GHSA-f25v-x6vr-962gNo exploit | Pheditor: Authentication Bypass in Forced Password-Change Flow via Unverified Current PasswordPackagist · pheditor/pheditor · CWE-1392 | Critical10.0 | — | — | Jul 24, 2026 |
39Monitor | CVE-2023-30801No exploit | qBittorrent Web UI Default Credentials Lead to RCEqbittorrent · qbittorrent · CWE-1392 | Critical9.8 | — | 1.2% | Oct 10, 2023 |
39Monitor | CVE-2023-30603No exploit | Hitron Technologies Inc. CODA-5310 - Using default credentialshitrontech · coda-5310 firmware · CWE-1392 | Critical9.8 | — | 0.8% | Jun 2, 2023 |
39Monitor | CVE-2025-10542No exploit | Insecure Default Admin Credentials Enable Full Administrative Access in iMonitor EAMimonitor software inc. · imonitor eam · CWE-1392 | Critical9.8 | — | 0.7% | Sep 25, 2025 |
39Monitor | CVE-2024-39747No exploit | IBM Sterling Connect:Direct Web Services information disclosureibm · sterling connect direct web services · CWE-1392 | Critical9.8 | — | 0.7% | Aug 30, 2024 |
39Monitor | CVE-2026-68503No exploit | LazyOwn: Default C2 Operator Credentials Enable Administrative Access to C2 Dashboardgrisuno · lazyown · CWE-1392 | Critical9.8 | — | 0.7% | Jul 30, 2026 |
39Monitor | CVE-2024-29844No exploit | Default credentials on web interface of Evolution Controller Versions allows attackers to login and perform administrative functionscs-technologies · evolution · CWE-1392 | Critical9.8 | — | 0.6% | Apr 14, 2024 |
39Monitor | CVE-2023-3703No exploit | Proscend Advice ICR Series routers fw version 1.76proscend · m357-5g firmware · CWE-1392 | Critical9.8 | — | 0.6% | Sep 3, 2023 |
39Monitor | CVE-2023-49621No exploit | A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.7).siemens · simatic cn 4100 firmware · CWE-1392 | Critical9.8 | — | 0.5% | Jan 9, 2024 |
39Monitor | CVE-2026-78573No exploit | IBM ContextForge MCP Gateway is affected by use of default credentialsibm · contextforge · CWE-1392 | Critical9.8 | — | 0.5% | Sep 10, 2026 |
39Monitor | CVE-2023-27573No exploit | netbox-docker before 2.5.0 has a superuser account with default credentials (admin password for the admin account, and 0123456789abcdef01234netboxlabs · netbox-docker · CWE-1392 | Critical9.8 | — | 0.5% | Mar 11, 2026 |
39Monitor | CVE-2024-6788No exploit | Phoenix Contact: update feature from CHARX controller can be used to reset a low privilege user passwordphoenixcontact · charx sec-3000 firmware · CWE-1392 | Critical9.8 | — | 0.5% | Aug 13, 2024 |
39Monitor | CVE-2026-42072No exploit | Nornicdb: Improper Network Binding in NornicDB Bolt Server allows unauthorized remote accessorneryd · nornicdb · CWE-1392 | Critical9.8 | — | 0.4% | May 8, 2026 |
39Monitor | CVE-2025-30139No exploit | An issue was discovered on G-Net Dashcam BB GONX devices.gnetsystem · g-onx firmware · CWE-1392 | Critical9.8 | — | 0.4% | Mar 18, 2025 |
39Monitor | CVE-2026-3144No exploit | IBM API Connect Default Credentialsibm · api connect · CWE-1392 | Critical9.8 | — | 0.4% | Jul 8, 2026 |
39Monitor | CVE-2025-54303No exploit | The Thermo Fisher Torrent Suite Django application 5.18.1 has weak default credentials, which are stored as fixtures for the Django ORM API.thermofisher · torrent suite software · CWE-1392 | Critical9.8 | — | 0.3% | Dec 4, 2025 |
39Monitor | CVE-2026-90924No exploit | Default Admin Credentials in Innotim Software's Logsign SIEMinnotim software, telecommunications and consultancy trade ltd. co. · logsign siem · CWE-1392 | Critical9.8 | — | 0.2% | Sep 28, 2026 |
38Monitor | CVE-2026-26341Proof of concept | Tattile Smart+ / Vega / Basic <= 1.181.5 Default Credentialstattile · smart\+ firmware · CWE-1392 | Critical9.3 | — | 2.8% | Feb 24, 2026 |
38Monitor | CVE-2026-58453No exploit | JAIOTlink C492A-W6 4.8.30.57701411 Hard-coded Credentials via anyka_ipcjaiotlink · c492a-w6 wi-fi ip camera · CWE-1392 | Critical9.3 | — | 1.8% | Jul 1, 2026 |
38Monitor | CVE-2024-7746No exploit | Use of default credentials at Traccar fleet management solutiontraccar · traccar · CWE-1392 | Critical9.5 | — | 0.5% | Aug 13, 2024 |
37Monitor | CVE-2026-41939No exploit | Care Everywhere Gateway 14.3.10 Hard-coded Credentials RCE via WildFlycare everywhere llc · care everywhere gateway · CWE-1392 | Critical9.3 | — | 1.0% | Jul 29, 2026 |
37Monitor | CVE-2026-58466No exploit | AutoBangumi < 3.2.8 - Hard-coded Default Credentials via add_default_user()estrellaxd · auto_bangumi · CWE-1392 | Critical9.3 | — | 0.8% | Jul 2, 2026 |
- CVE-2026-10010340Plan
Authentication bypass via default auth token in P4Search
CriticalCVSS 10.0No exploitEPSS 0%perfoce · p4 (helix core)Oct 5, 2026
- CVE-2025-5505140Plan
CWE-1392: Use of Default Credentials
CriticalCVSS 10.0No exploitEPSS 0%baicells · nova430e/430i, nova436q, neutrino430, nova846Sep 9, 2025
- CVE-2025-1221840Plan
Weak Default Credentials
CriticalCVSS 10.0No exploitEPSS 0%azure-access · blu-ic2 firmwareOct 25, 2025
- GHSA-f25v-x6vr-962g40Plan
Pheditor: Authentication Bypass in Forced Password-Change Flow via Unverified Current Password
CriticalCVSS 10.0No exploitPackagist · pheditor/pheditorJul 24, 2026
- CVE-2023-3080139Monitor
qBittorrent Web UI Default Credentials Lead to RCE
CriticalCVSS 9.8No exploitEPSS 1%qbittorrent · qbittorrentOct 10, 2023
- CVE-2023-3060339Monitor
Hitron Technologies Inc. CODA-5310 - Using default credentials
CriticalCVSS 9.8No exploitEPSS 0%hitrontech · coda-5310 firmwareJun 2, 2023
- CVE-2025-1054239Monitor
Insecure Default Admin Credentials Enable Full Administrative Access in iMonitor EAM
CriticalCVSS 9.8No exploitEPSS 0%imonitor software inc. · imonitor eamSep 25, 2025
- CVE-2024-3974739Monitor
IBM Sterling Connect:Direct Web Services information disclosure
CriticalCVSS 9.8No exploitEPSS 0%ibm · sterling connect direct web servicesAug 30, 2024
- CVE-2026-6850339Monitor
LazyOwn: Default C2 Operator Credentials Enable Administrative Access to C2 Dashboard
CriticalCVSS 9.8No exploitEPSS 0%grisuno · lazyownJul 30, 2026
- CVE-2024-2984439Monitor
Default credentials on web interface of Evolution Controller Versions allows attackers to login and perform administrative functions
CriticalCVSS 9.8No exploitEPSS 0%cs-technologies · evolutionApr 14, 2024
- CVE-2023-370339Monitor
Proscend Advice ICR Series routers fw version 1.76
CriticalCVSS 9.8No exploitEPSS 0%proscend · m357-5g firmwareSep 3, 2023
- CVE-2023-4962139Monitor
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.7).
CriticalCVSS 9.8No exploitEPSS 0%siemens · simatic cn 4100 firmwareJan 9, 2024
- CVE-2026-7857339Monitor
IBM ContextForge MCP Gateway is affected by use of default credentials
CriticalCVSS 9.8No exploitEPSS 0%ibm · contextforgeSep 10, 2026
- CVE-2023-2757339Monitor
netbox-docker before 2.5.0 has a superuser account with default credentials (admin password for the admin account, and 0123456789abcdef01234
CriticalCVSS 9.8No exploitEPSS 0%netboxlabs · netbox-dockerMar 11, 2026
- CVE-2024-678839Monitor
Phoenix Contact: update feature from CHARX controller can be used to reset a low privilege user password
CriticalCVSS 9.8No exploitEPSS 0%phoenixcontact · charx sec-3000 firmwareAug 13, 2024
- CVE-2026-4207239Monitor
Nornicdb: Improper Network Binding in NornicDB Bolt Server allows unauthorized remote access
CriticalCVSS 9.8No exploitEPSS 0%orneryd · nornicdbMay 8, 2026
- CVE-2025-3013939Monitor
An issue was discovered on G-Net Dashcam BB GONX devices.
CriticalCVSS 9.8No exploitEPSS 0%gnetsystem · g-onx firmwareMar 18, 2025
- CVE-2026-314439Monitor
IBM API Connect Default Credentials
CriticalCVSS 9.8No exploitEPSS 0%ibm · api connectJul 8, 2026
- CVE-2025-5430339Monitor
The Thermo Fisher Torrent Suite Django application 5.18.1 has weak default credentials, which are stored as fixtures for the Django ORM API.
CriticalCVSS 9.8No exploitEPSS 0%thermofisher · torrent suite softwareDec 4, 2025
- CVE-2026-9092439Monitor
Default Admin Credentials in Innotim Software's Logsign SIEM
CriticalCVSS 9.8No exploitEPSS 0%innotim software, telecommunications and consultancy trade ltd. co. · logsign siemSep 28, 2026
- CVE-2026-2634138Monitor
Tattile Smart+ / Vega / Basic <= 1.181.5 Default Credentials
CriticalCVSS 9.3Proof of conceptEPSS 2%tattile · smart\+ firmwareFeb 24, 2026
- CVE-2026-5845338Monitor
JAIOTlink C492A-W6 4.8.30.57701411 Hard-coded Credentials via anyka_ipc
CriticalCVSS 9.3No exploitEPSS 1%jaiotlink · c492a-w6 wi-fi ip cameraJul 1, 2026
- CVE-2024-774638Monitor
Use of default credentials at Traccar fleet management solution
CriticalCVSS 9.5No exploitEPSS 0%traccar · traccarAug 13, 2024
- CVE-2026-4193937Monitor
Care Everywhere Gateway 14.3.10 Hard-coded Credentials RCE via WildFly
CriticalCVSS 9.3No exploitEPSS 1%care everywhere llc · care everywhere gatewayJul 29, 2026
- CVE-2026-5846637Monitor
AutoBangumi < 3.2.8 - Hard-coded Default Credentials via add_default_user()
CriticalCVSS 9.3No exploitEPSS 0%estrellaxd · auto_bangumiJul 2, 2026