CWE-1393 · 39 records
Use of Default Password
CVEs in this class
39 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
85Now | CVE-2023-45249Weaponized | Remote command execution due to use of default passwords.acronis · cyber infrastructure · CWE-1393 | Critical9.8 | KEV | 53.5% | Jul 24, 2024 |
40Plan | CVE-2025-26701No exploit | An issue was discovered in Percona PMM Server (OVA) before 3.0.0-1.ova.percona · monitoring and management · CWE-1393 | Critical10.0 | — | 0.4% | Mar 11, 2025 |
39Monitor | CVE-2023-25131No exploit | Use of default password vulnerability in CyberPower PowerPanel Businesscyberpower · powerpanel · CWE-1393 | Critical9.8 | — | 0.9% | Apr 24, 2023 |
39Monitor | CVE-2024-29666No exploit | Insecure Permissions vulnerability in Vehicle Monitoring platform system CMSV6 v.7.31.0.2 through v.7.32.0.3 allows a remote attacker to escCWE-1393 | Critical9.8 | — | 0.7% | Mar 25, 2024 |
39Monitor | CVE-2023-32090No exploit | Pega platform clients who are using versions 6.1 through 7.3.1 may be utilizing default credentials pega · pega platform · CWE-1393 | Critical9.8 | — | 0.6% | Aug 7, 2023 |
39Monitor | CVE-2022-4126No exploit | Use of Default Passwordabb · rccmd · CWE-1393 | Critical9.8 | — | 0.6% | Mar 27, 2023 |
39Monitor | CVE-2025-22938No exploit | Adtran 411 ONT L80.00.0011.M2 was discovered to contain weak default passwords.adtran · 411 firmware · CWE-1393 | Critical9.8 | — | 0.5% | Mar 31, 2025 |
39Monitor | CVE-2025-8077No exploit | NeuVector admin account has insecure default passwordsuse · neuvector · CWE-1393 | Critical9.8 | — | 0.5% | Sep 17, 2025 |
39Monitor | CVE-2023-28094No exploit | Pega platform clients who are using versions 7.4 through 8.8.x and have upgraded from a version prior to 8.x may be utilizing default credenpega · pega platform · CWE-1393 | Critical9.8 | — | 0.5% | Jun 22, 2023 |
39Monitor | CVE-2024-30802No exploit | An issue in Vehicle Management System 7.31.0.3_20230412 allows an attacker to escalate privileges via the login.html component.CWE-1393 | Critical9.8 | — | 0.5% | May 14, 2024 |
39Monitor | CVE-2025-27690No exploit | Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.1.0, contains a use of default password vulnerability.dell · powerscale onefs · CWE-1393 | Critical9.8 | — | 0.4% | Apr 9, 2025 |
39Monitor | CVE-2026-5269No exploit | Navigator NCS and MCP System Accounts with Default Passwordsciena · navigator ncs · CWE-1393 | Critical9.8 | — | 0.4% | Jul 14, 2026 |
39Monitor | CVE-2025-14917No exploit | IBM WebSphere Application Server Liberty could provide weaker than expected securityibm · websphere application server · CWE-1393 | Critical9.8 | — | 0.4% | Mar 25, 2026 |
38Monitor | CVE-2025-26793Proof of concept | The Web GUI configuration panel of Hirsch (formerly Identiv and Viscount) Enterphone MESH through 2024 ships with default credentials (usernhirsch · enterphone mesh · CWE-1393 | Critical9.3 | — | 2.3% | Feb 15, 2025 |
37Monitor | CVE-2026-69657No exploit | XING CPTrans-ME-X contains a Use of Default Password (CWE-1393).xing inc. · xing cptrans-me-x · CWE-1393 | Critical9.3 | — | 0.5% | Sep 4, 2026 |
37Monitor | CVE-2026-35075No exploit | Hardcoded default Password for Service Accountmbs-solutions · universal gateway firmware · CWE-1393 | Critical9.3 | — | 0.4% | Jun 3, 2026 |
37Monitor | CVE-2026-33784No exploit | JSI Virtual Lightweight Collector: Default password is not required to be changed which allows unauthorized high-privileged accessjuniper · virtual lightweight collector · CWE-1393 | Critical9.3 | — | 0.4% | Apr 9, 2026 |
37Monitor | CVE-2026-24429No exploit | Tenda W30E V2 Hardcoded Default Password for Built-in Accounttenda · w30e firmware · CWE-1393 | Critical9.3 | — | 0.4% | Jan 26, 2026 |
37Monitor | CVE-2024-51555No exploit | Force Change of Default Credentialsabb · aspect-enterprise · CWE-1393 | Critical9.3 | — | 0.4% | Dec 5, 2024 |
37Monitor | CVE-2025-66050No exploit | No password set for administrative account in Vivotek IP7137 camerasvivotek · ip7137 firmware · CWE-1393 | Critical9.3 | — | 0.3% | Jan 9, 2026 |
36Monitor | CVE-2026-121022No exploit | Default Administrator Password Change Not Enforced in Axxon One Web Clientaxxonsoft · axxon one · CWE-1393 | Critical9.2 | — | 0.3% | 2 days ago |
35Monitor | CVE-2024-49559No exploit | Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contain(s) an Use of Default Password vulnerability.dell · smartfabric os10 · CWE-1393 | High8.8 | — | 0.4% | Mar 17, 2025 |
35Monitor | CVE-2025-2766No exploit | 70mai A510 Use of Default Password Authentication Bypass Vulnerability70mai · a510 firmware · CWE-1393 | High8.8 | — | 0.3% | Jun 6, 2025 |
30Monitor | CVE-2023-43042No exploit | IBM Storage Virtualize information disclosureibm · storage virtualize · CWE-1393 | High7.5 | — | 0.7% | Dec 13, 2023 |
30Monitor | CVE-2026-19851No exploit | Use of Default Password vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5dassault systèmes · tuleap enterprise edition · CWE-1393 | High7.7 | — | 0.3% | Aug 25, 2026 |
- CVE-2023-4524985Now
Remote command execution due to use of default passwords.
CriticalCVSS 9.8KEVWeaponizedEPSS 53%acronis · cyber infrastructureJul 24, 2024
- CVE-2025-2670140Plan
An issue was discovered in Percona PMM Server (OVA) before 3.0.0-1.ova.
CriticalCVSS 10.0No exploitEPSS 0%percona · monitoring and managementMar 11, 2025
- CVE-2023-2513139Monitor
Use of default password vulnerability in CyberPower PowerPanel Business
CriticalCVSS 9.8No exploitEPSS 0%cyberpower · powerpanelApr 24, 2023
- CVE-2024-2966639Monitor
Insecure Permissions vulnerability in Vehicle Monitoring platform system CMSV6 v.7.31.0.2 through v.7.32.0.3 allows a remote attacker to esc
CriticalCVSS 9.8No exploitEPSS 0%Mar 25, 2024
- CVE-2023-3209039Monitor
Pega platform clients who are using versions 6.1 through 7.3.1 may be utilizing default credentials
CriticalCVSS 9.8No exploitEPSS 0%pega · pega platformAug 7, 2023
- CVE-2022-412639Monitor
Use of Default Password
CriticalCVSS 9.8No exploitEPSS 0%abb · rccmdMar 27, 2023
- CVE-2025-2293839Monitor
Adtran 411 ONT L80.00.0011.M2 was discovered to contain weak default passwords.
CriticalCVSS 9.8No exploitEPSS 0%adtran · 411 firmwareMar 31, 2025
- CVE-2025-807739Monitor
NeuVector admin account has insecure default password
CriticalCVSS 9.8No exploitEPSS 0%suse · neuvectorSep 17, 2025
- CVE-2023-2809439Monitor
Pega platform clients who are using versions 7.4 through 8.8.x and have upgraded from a version prior to 8.x may be utilizing default creden
CriticalCVSS 9.8No exploitEPSS 0%pega · pega platformJun 22, 2023
- CVE-2024-3080239Monitor
An issue in Vehicle Management System 7.31.0.3_20230412 allows an attacker to escalate privileges via the login.html component.
CriticalCVSS 9.8No exploitEPSS 0%May 14, 2024
- CVE-2025-2769039Monitor
Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.1.0, contains a use of default password vulnerability.
CriticalCVSS 9.8No exploitEPSS 0%dell · powerscale onefsApr 9, 2025
- CVE-2026-526939Monitor
Navigator NCS and MCP System Accounts with Default Passwords
CriticalCVSS 9.8No exploitEPSS 0%ciena · navigator ncsJul 14, 2026
- CVE-2025-1491739Monitor
IBM WebSphere Application Server Liberty could provide weaker than expected security
CriticalCVSS 9.8No exploitEPSS 0%ibm · websphere application serverMar 25, 2026
- CVE-2025-2679338Monitor
The Web GUI configuration panel of Hirsch (formerly Identiv and Viscount) Enterphone MESH through 2024 ships with default credentials (usern
CriticalCVSS 9.3Proof of conceptEPSS 2%hirsch · enterphone meshFeb 15, 2025
- CVE-2026-6965737Monitor
XING CPTrans-ME-X contains a Use of Default Password (CWE-1393).
CriticalCVSS 9.3No exploitEPSS 0%xing inc. · xing cptrans-me-xSep 4, 2026
- CVE-2026-3507537Monitor
Hardcoded default Password for Service Account
CriticalCVSS 9.3No exploitEPSS 0%mbs-solutions · universal gateway firmwareJun 3, 2026
- CVE-2026-3378437Monitor
JSI Virtual Lightweight Collector: Default password is not required to be changed which allows unauthorized high-privileged access
CriticalCVSS 9.3No exploitEPSS 0%juniper · virtual lightweight collectorApr 9, 2026
- CVE-2026-2442937Monitor
Tenda W30E V2 Hardcoded Default Password for Built-in Account
CriticalCVSS 9.3No exploitEPSS 0%tenda · w30e firmwareJan 26, 2026
- CVE-2024-5155537Monitor
Force Change of Default Credentials
CriticalCVSS 9.3No exploitEPSS 0%abb · aspect-enterpriseDec 5, 2024
- CVE-2025-6605037Monitor
No password set for administrative account in Vivotek IP7137 cameras
CriticalCVSS 9.3No exploitEPSS 0%vivotek · ip7137 firmwareJan 9, 2026
- CVE-2026-12102236Monitor
Default Administrator Password Change Not Enforced in Axxon One Web Client
CriticalCVSS 9.2No exploitEPSS 0%axxonsoft · axxon one2 days ago
- CVE-2024-4955935Monitor
Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contain(s) an Use of Default Password vulnerability.
HighCVSS 8.8No exploitEPSS 0%dell · smartfabric os10Mar 17, 2025
- CVE-2025-276635Monitor
70mai A510 Use of Default Password Authentication Bypass Vulnerability
HighCVSS 8.8No exploitEPSS 0%70mai · a510 firmwareJun 6, 2025
- CVE-2023-4304230Monitor
IBM Storage Virtualize information disclosure
HighCVSS 7.5No exploitEPSS 0%ibm · storage virtualizeDec 13, 2023
- CVE-2026-1985130Monitor
Use of Default Password vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5
HighCVSS 7.7No exploitEPSS 0%dassault systèmes · tuleap enterprise editionAug 25, 2026