CWE-1392 · 115 kayıt
Use of Default Credentials
Bu sınıftaki CVE’ler
115 kayıt
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2026-100103İstismar yok | Authentication bypass via default auth token in P4Searchperfoce · p4 (helix core) · CWE-1392 | Kritik10,0 | — | %0,4 | 5 Eki 2026 |
40Planlayın | CVE-2025-55051İstismar yok | CWE-1392: Use of Default Credentialsbaicells · nova430e/430i, nova436q, neutrino430, nova846 · CWE-1392 | Kritik10,0 | — | %0,3 | 9 Eyl 2025 |
40Planlayın | CVE-2025-12218İstismar yok | Weak Default Credentialsazure-access · blu-ic2 firmware · CWE-1392 | Kritik10,0 | — | %0,2 | 25 Eki 2025 |
40Planlayın | GHSA-f25v-x6vr-962gİstismar yok | Pheditor: Authentication Bypass in Forced Password-Change Flow via Unverified Current PasswordPackagist · pheditor/pheditor · CWE-1392 | Kritik10,0 | — | — | 24 Tem 2026 |
39İzleyin | CVE-2023-30801İstismar yok | qBittorrent Web UI Default Credentials Lead to RCEqbittorrent · qbittorrent · CWE-1392 | Kritik9,8 | — | %1,2 | 10 Eki 2023 |
39İzleyin | CVE-2023-30603İstismar yok | Hitron Technologies Inc. CODA-5310 - Using default credentialshitrontech · coda-5310 firmware · CWE-1392 | Kritik9,8 | — | %0,8 | 2 Haz 2023 |
39İzleyin | CVE-2025-10542İstismar yok | Insecure Default Admin Credentials Enable Full Administrative Access in iMonitor EAMimonitor software inc. · imonitor eam · CWE-1392 | Kritik9,8 | — | %0,8 | 25 Eyl 2025 |
39İzleyin | CVE-2024-39747İstismar yok | IBM Sterling Connect:Direct Web Services information disclosureibm · sterling connect direct web services · CWE-1392 | Kritik9,8 | — | %0,7 | 30 Ağu 2024 |
39İzleyin | CVE-2026-68503İstismar yok | LazyOwn: Default C2 Operator Credentials Enable Administrative Access to C2 Dashboardgrisuno · lazyown · CWE-1392 | Kritik9,8 | — | %0,7 | 30 Tem 2026 |
39İzleyin | CVE-2024-29844İstismar yok | Default credentials on web interface of Evolution Controller Versions allows attackers to login and perform administrative functionscs-technologies · evolution · CWE-1392 | Kritik9,8 | — | %0,6 | 14 Nis 2024 |
39İzleyin | CVE-2023-3703İstismar yok | Proscend Advice ICR Series routers fw version 1.76proscend · m357-5g firmware · CWE-1392 | Kritik9,8 | — | %0,6 | 3 Eyl 2023 |
39İzleyin | CVE-2026-42072İstismar yok | Nornicdb: Improper Network Binding in NornicDB Bolt Server allows unauthorized remote accessorneryd · nornicdb · CWE-1392 | Kritik9,8 | — | %0,6 | 8 May 2026 |
39İzleyin | CVE-2023-49621İstismar yok | A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.7).siemens · simatic cn 4100 firmware · CWE-1392 | Kritik9,8 | — | %0,5 | 9 Oca 2024 |
39İzleyin | CVE-2026-78573İstismar yok | IBM ContextForge MCP Gateway is affected by use of default credentialsibm · contextforge · CWE-1392 | Kritik9,8 | — | %0,5 | 10 Eyl 2026 |
39İzleyin | CVE-2024-6788İstismar yok | Phoenix Contact: update feature from CHARX controller can be used to reset a low privilege user passwordphoenixcontact · charx sec-3000 firmware · CWE-1392 | Kritik9,8 | — | %0,5 | 13 Ağu 2024 |
39İzleyin | CVE-2023-27573İstismar yok | netbox-docker before 2.5.0 has a superuser account with default credentials (admin password for the admin account, and 0123456789abcdef01234netboxlabs · netbox-docker · CWE-1392 | Kritik9,8 | — | %0,5 | 11 Mar 2026 |
39İzleyin | CVE-2025-30139İstismar yok | An issue was discovered on G-Net Dashcam BB GONX devices.gnetsystem · g-onx firmware · CWE-1392 | Kritik9,8 | — | %0,4 | 18 Mar 2025 |
39İzleyin | CVE-2026-3144İstismar yok | IBM API Connect Default Credentialsibm · api connect · CWE-1392 | Kritik9,8 | — | %0,4 | 8 Tem 2026 |
39İzleyin | CVE-2025-54303İstismar yok | The Thermo Fisher Torrent Suite Django application 5.18.1 has weak default credentials, which are stored as fixtures for the Django ORM API.thermofisher · torrent suite software · CWE-1392 | Kritik9,8 | — | %0,3 | 4 Ara 2025 |
39İzleyin | CVE-2026-90924İstismar yok | Default Admin Credentials in Innotim Software's Logsign SIEMinnotim software, telecommunications and consultancy trade ltd. co. · logsign siem · CWE-1392 | Kritik9,8 | — | %0,2 | 28 Eyl 2026 |
38İzleyin | CVE-2026-26341Kavram kanıtı | Tattile Smart+ / Vega / Basic <= 1.181.5 Default Credentialstattile · smart\+ firmware · CWE-1392 | Kritik9,3 | — | %2,7 | 24 Şub 2026 |
38İzleyin | CVE-2026-58453İstismar yok | JAIOTlink C492A-W6 4.8.30.57701411 Hard-coded Credentials via anyka_ipcjaiotlink · c492a-w6 wi-fi ip camera · CWE-1392 | Kritik9,3 | — | %1,8 | 1 Tem 2026 |
38İzleyin | CVE-2024-7746İstismar yok | Use of default credentials at Traccar fleet management solutiontraccar · traccar · CWE-1392 | Kritik9,5 | — | %0,5 | 13 Ağu 2024 |
37İzleyin | CVE-2026-41939İstismar yok | Care Everywhere Gateway 14.3.10 Hard-coded Credentials RCE via WildFlycare everywhere llc · care everywhere gateway · CWE-1392 | Kritik9,3 | — | %1,0 | 29 Tem 2026 |
37İzleyin | CVE-2026-58466İstismar yok | AutoBangumi < 3.2.8 - Hard-coded Default Credentials via add_default_user()estrellaxd · auto_bangumi · CWE-1392 | Kritik9,3 | — | %0,8 | 2 Tem 2026 |
- CVE-2026-10010340Planlayın
Authentication bypass via default auth token in P4Search
KritikCVSS 10,0İstismar yokEPSS %0perfoce · p4 (helix core)5 Eki 2026
- CVE-2025-5505140Planlayın
CWE-1392: Use of Default Credentials
KritikCVSS 10,0İstismar yokEPSS %0baicells · nova430e/430i, nova436q, neutrino430, nova8469 Eyl 2025
- CVE-2025-1221840Planlayın
Weak Default Credentials
KritikCVSS 10,0İstismar yokEPSS %0azure-access · blu-ic2 firmware25 Eki 2025
- GHSA-f25v-x6vr-962g40Planlayın
Pheditor: Authentication Bypass in Forced Password-Change Flow via Unverified Current Password
KritikCVSS 10,0İstismar yokPackagist · pheditor/pheditor24 Tem 2026
- CVE-2023-3080139İzleyin
qBittorrent Web UI Default Credentials Lead to RCE
KritikCVSS 9,8İstismar yokEPSS %1qbittorrent · qbittorrent10 Eki 2023
- CVE-2023-3060339İzleyin
Hitron Technologies Inc. CODA-5310 - Using default credentials
KritikCVSS 9,8İstismar yokEPSS %0hitrontech · coda-5310 firmware2 Haz 2023
- CVE-2025-1054239İzleyin
Insecure Default Admin Credentials Enable Full Administrative Access in iMonitor EAM
KritikCVSS 9,8İstismar yokEPSS %0imonitor software inc. · imonitor eam25 Eyl 2025
- CVE-2024-3974739İzleyin
IBM Sterling Connect:Direct Web Services information disclosure
KritikCVSS 9,8İstismar yokEPSS %0ibm · sterling connect direct web services30 Ağu 2024
- CVE-2026-6850339İzleyin
LazyOwn: Default C2 Operator Credentials Enable Administrative Access to C2 Dashboard
KritikCVSS 9,8İstismar yokEPSS %0grisuno · lazyown30 Tem 2026
- CVE-2024-2984439İzleyin
Default credentials on web interface of Evolution Controller Versions allows attackers to login and perform administrative functions
KritikCVSS 9,8İstismar yokEPSS %0cs-technologies · evolution14 Nis 2024
- CVE-2023-370339İzleyin
Proscend Advice ICR Series routers fw version 1.76
KritikCVSS 9,8İstismar yokEPSS %0proscend · m357-5g firmware3 Eyl 2023
- CVE-2026-4207239İzleyin
Nornicdb: Improper Network Binding in NornicDB Bolt Server allows unauthorized remote access
KritikCVSS 9,8İstismar yokEPSS %0orneryd · nornicdb8 May 2026
- CVE-2023-4962139İzleyin
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.7).
KritikCVSS 9,8İstismar yokEPSS %0siemens · simatic cn 4100 firmware9 Oca 2024
- CVE-2026-7857339İzleyin
IBM ContextForge MCP Gateway is affected by use of default credentials
KritikCVSS 9,8İstismar yokEPSS %0ibm · contextforge10 Eyl 2026
- CVE-2024-678839İzleyin
Phoenix Contact: update feature from CHARX controller can be used to reset a low privilege user password
KritikCVSS 9,8İstismar yokEPSS %0phoenixcontact · charx sec-3000 firmware13 Ağu 2024
- CVE-2023-2757339İzleyin
netbox-docker before 2.5.0 has a superuser account with default credentials (admin password for the admin account, and 0123456789abcdef01234
KritikCVSS 9,8İstismar yokEPSS %0netboxlabs · netbox-docker11 Mar 2026
- CVE-2025-3013939İzleyin
An issue was discovered on G-Net Dashcam BB GONX devices.
KritikCVSS 9,8İstismar yokEPSS %0gnetsystem · g-onx firmware18 Mar 2025
- CVE-2026-314439İzleyin
IBM API Connect Default Credentials
KritikCVSS 9,8İstismar yokEPSS %0ibm · api connect8 Tem 2026
- CVE-2025-5430339İzleyin
The Thermo Fisher Torrent Suite Django application 5.18.1 has weak default credentials, which are stored as fixtures for the Django ORM API.
KritikCVSS 9,8İstismar yokEPSS %0thermofisher · torrent suite software4 Ara 2025
- CVE-2026-9092439İzleyin
Default Admin Credentials in Innotim Software's Logsign SIEM
KritikCVSS 9,8İstismar yokEPSS %0innotim software, telecommunications and consultancy trade ltd. co. · logsign siem28 Eyl 2026
- CVE-2026-2634138İzleyin
Tattile Smart+ / Vega / Basic <= 1.181.5 Default Credentials
KritikCVSS 9,3Kavram kanıtıEPSS %2tattile · smart\+ firmware24 Şub 2026
- CVE-2026-5845338İzleyin
JAIOTlink C492A-W6 4.8.30.57701411 Hard-coded Credentials via anyka_ipc
KritikCVSS 9,3İstismar yokEPSS %1jaiotlink · c492a-w6 wi-fi ip camera1 Tem 2026
- CVE-2024-774638İzleyin
Use of default credentials at Traccar fleet management solution
KritikCVSS 9,5İstismar yokEPSS %0traccar · traccar13 Ağu 2024
- CVE-2026-4193937İzleyin
Care Everywhere Gateway 14.3.10 Hard-coded Credentials RCE via WildFly
KritikCVSS 9,3İstismar yokEPSS %1care everywhere llc · care everywhere gateway29 Tem 2026
- CVE-2026-5846637İzleyin
AutoBangumi < 3.2.8 - Hard-coded Default Credentials via add_default_user()
KritikCVSS 9,3İstismar yokEPSS %0estrellaxd · auto_bangumi2 Tem 2026