CWE-1393 · 38 kayıt
Use of Default Password
Bu sınıftaki CVE’ler
38 kayıt
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
85Hemen | CVE-2023-45249Silahlaştırılmış | Remote command execution due to use of default passwords.acronis · cyber infrastructure · CWE-1393 | Kritik9,8 | KEV | %53,2 | 24 Tem 2024 |
40Planlayın | CVE-2025-26701İstismar yok | An issue was discovered in Percona PMM Server (OVA) before 3.0.0-1.ova.percona · monitoring and management · CWE-1393 | Kritik10,0 | — | %0,4 | 11 Mar 2025 |
39İzleyin | CVE-2023-25131İstismar yok | Use of default password vulnerability in CyberPower PowerPanel Businesscyberpower · powerpanel · CWE-1393 | Kritik9,8 | — | %0,9 | 24 Nis 2023 |
39İzleyin | CVE-2024-29666İstismar yok | Insecure Permissions vulnerability in Vehicle Monitoring platform system CMSV6 v.7.31.0.2 through v.7.32.0.3 allows a remote attacker to escCWE-1393 | Kritik9,8 | — | %0,7 | 25 Mar 2024 |
39İzleyin | CVE-2023-32090İstismar yok | Pega platform clients who are using versions 6.1 through 7.3.1 may be utilizing default credentials pega · pega platform · CWE-1393 | Kritik9,8 | — | %0,6 | 7 Ağu 2023 |
39İzleyin | CVE-2022-4126İstismar yok | Use of Default Passwordabb · rccmd · CWE-1393 | Kritik9,8 | — | %0,6 | 27 Mar 2023 |
39İzleyin | CVE-2025-8077İstismar yok | NeuVector admin account has insecure default passwordsuse · neuvector · CWE-1393 | Kritik9,8 | — | %0,5 | 17 Eyl 2025 |
39İzleyin | CVE-2025-22938İstismar yok | Adtran 411 ONT L80.00.0011.M2 was discovered to contain weak default passwords.adtran · 411 firmware · CWE-1393 | Kritik9,8 | — | %0,5 | 31 Mar 2025 |
39İzleyin | CVE-2023-28094İstismar yok | Pega platform clients who are using versions 7.4 through 8.8.x and have upgraded from a version prior to 8.x may be utilizing default credenpega · pega platform · CWE-1393 | Kritik9,8 | — | %0,5 | 22 Haz 2023 |
39İzleyin | CVE-2024-30802İstismar yok | An issue in Vehicle Management System 7.31.0.3_20230412 allows an attacker to escalate privileges via the login.html component.CWE-1393 | Kritik9,8 | — | %0,5 | 14 May 2024 |
39İzleyin | CVE-2025-27690İstismar yok | Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.1.0, contains a use of default password vulnerability.dell · powerscale onefs · CWE-1393 | Kritik9,8 | — | %0,4 | 9 Nis 2025 |
39İzleyin | CVE-2026-5269İstismar yok | Navigator NCS and MCP System Accounts with Default Passwordsciena · navigator ncs · CWE-1393 | Kritik9,8 | — | %0,4 | 14 Tem 2026 |
39İzleyin | CVE-2025-14917İstismar yok | IBM WebSphere Application Server Liberty could provide weaker than expected securityibm · websphere application server · CWE-1393 | Kritik9,8 | — | %0,4 | 25 Mar 2026 |
38İzleyin | CVE-2025-26793Kavram kanıtı | The Web GUI configuration panel of Hirsch (formerly Identiv and Viscount) Enterphone MESH through 2024 ships with default credentials (usernhirsch · enterphone mesh · CWE-1393 | Kritik9,3 | — | %2,3 | 15 Şub 2025 |
37İzleyin | CVE-2026-35075İstismar yok | Hardcoded default Password for Service Accountmbs-solutions · universal gateway firmware · CWE-1393 | Kritik9,3 | — | %0,5 | 3 Haz 2026 |
37İzleyin | CVE-2026-69657İstismar yok | XING CPTrans-ME-X contains a Use of Default Password (CWE-1393).xing inc. · xing cptrans-me-x · CWE-1393 | Kritik9,3 | — | %0,5 | 4 Eyl 2026 |
37İzleyin | CVE-2026-33784İstismar yok | JSI Virtual Lightweight Collector: Default password is not required to be changed which allows unauthorized high-privileged accessjuniper · virtual lightweight collector · CWE-1393 | Kritik9,3 | — | %0,4 | 9 Nis 2026 |
37İzleyin | CVE-2026-24429İstismar yok | Tenda W30E V2 Hardcoded Default Password for Built-in Accounttenda · w30e firmware · CWE-1393 | Kritik9,3 | — | %0,4 | 26 Oca 2026 |
37İzleyin | CVE-2024-51555İstismar yok | Force Change of Default Credentialsabb · aspect-enterprise · CWE-1393 | Kritik9,3 | — | %0,4 | 5 Ara 2024 |
37İzleyin | CVE-2025-66050İstismar yok | No password set for administrative account in Vivotek IP7137 camerasvivotek · ip7137 firmware · CWE-1393 | Kritik9,3 | — | %0,3 | 9 Oca 2026 |
35İzleyin | CVE-2024-49559İstismar yok | Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contain(s) an Use of Default Password vulnerability.dell · smartfabric os10 · CWE-1393 | Yüksek8,8 | — | %0,4 | 17 Mar 2025 |
35İzleyin | CVE-2025-2766İstismar yok | 70mai A510 Use of Default Password Authentication Bypass Vulnerability70mai · a510 firmware · CWE-1393 | Yüksek8,8 | — | %0,3 | 6 Haz 2025 |
30İzleyin | CVE-2023-43042İstismar yok | IBM Storage Virtualize information disclosureibm · storage virtualize · CWE-1393 | Yüksek7,5 | — | %0,7 | 13 Ara 2023 |
30İzleyin | CVE-2026-19851İstismar yok | Use of Default Password vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5dassault systèmes · tuleap enterprise edition · CWE-1393 | Yüksek7,7 | — | %0,2 | 25 Ağu 2026 |
29İzleyin | CVE-2026-2635İstismar yok | MLflow Use of Default Password Authentication Bypass Vulnerabilitymlflow · mlflow · CWE-1393 | Yüksek7,3 | — | %1,3 | 20 Şub 2026 |
- CVE-2023-4524985Hemen
Remote command execution due to use of default passwords.
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %53acronis · cyber infrastructure24 Tem 2024
- CVE-2025-2670140Planlayın
An issue was discovered in Percona PMM Server (OVA) before 3.0.0-1.ova.
KritikCVSS 10,0İstismar yokEPSS %0percona · monitoring and management11 Mar 2025
- CVE-2023-2513139İzleyin
Use of default password vulnerability in CyberPower PowerPanel Business
KritikCVSS 9,8İstismar yokEPSS %0cyberpower · powerpanel24 Nis 2023
- CVE-2024-2966639İzleyin
Insecure Permissions vulnerability in Vehicle Monitoring platform system CMSV6 v.7.31.0.2 through v.7.32.0.3 allows a remote attacker to esc
KritikCVSS 9,8İstismar yokEPSS %025 Mar 2024
- CVE-2023-3209039İzleyin
Pega platform clients who are using versions 6.1 through 7.3.1 may be utilizing default credentials
KritikCVSS 9,8İstismar yokEPSS %0pega · pega platform7 Ağu 2023
- CVE-2022-412639İzleyin
Use of Default Password
KritikCVSS 9,8İstismar yokEPSS %0abb · rccmd27 Mar 2023
- CVE-2025-807739İzleyin
NeuVector admin account has insecure default password
KritikCVSS 9,8İstismar yokEPSS %0suse · neuvector17 Eyl 2025
- CVE-2025-2293839İzleyin
Adtran 411 ONT L80.00.0011.M2 was discovered to contain weak default passwords.
KritikCVSS 9,8İstismar yokEPSS %0adtran · 411 firmware31 Mar 2025
- CVE-2023-2809439İzleyin
Pega platform clients who are using versions 7.4 through 8.8.x and have upgraded from a version prior to 8.x may be utilizing default creden
KritikCVSS 9,8İstismar yokEPSS %0pega · pega platform22 Haz 2023
- CVE-2024-3080239İzleyin
An issue in Vehicle Management System 7.31.0.3_20230412 allows an attacker to escalate privileges via the login.html component.
KritikCVSS 9,8İstismar yokEPSS %014 May 2024
- CVE-2025-2769039İzleyin
Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.1.0, contains a use of default password vulnerability.
KritikCVSS 9,8İstismar yokEPSS %0dell · powerscale onefs9 Nis 2025
- CVE-2026-526939İzleyin
Navigator NCS and MCP System Accounts with Default Passwords
KritikCVSS 9,8İstismar yokEPSS %0ciena · navigator ncs14 Tem 2026
- CVE-2025-1491739İzleyin
IBM WebSphere Application Server Liberty could provide weaker than expected security
KritikCVSS 9,8İstismar yokEPSS %0ibm · websphere application server25 Mar 2026
- CVE-2025-2679338İzleyin
The Web GUI configuration panel of Hirsch (formerly Identiv and Viscount) Enterphone MESH through 2024 ships with default credentials (usern
KritikCVSS 9,3Kavram kanıtıEPSS %2hirsch · enterphone mesh15 Şub 2025
- CVE-2026-3507537İzleyin
Hardcoded default Password for Service Account
KritikCVSS 9,3İstismar yokEPSS %0mbs-solutions · universal gateway firmware3 Haz 2026
- CVE-2026-6965737İzleyin
XING CPTrans-ME-X contains a Use of Default Password (CWE-1393).
KritikCVSS 9,3İstismar yokEPSS %0xing inc. · xing cptrans-me-x4 Eyl 2026
- CVE-2026-3378437İzleyin
JSI Virtual Lightweight Collector: Default password is not required to be changed which allows unauthorized high-privileged access
KritikCVSS 9,3İstismar yokEPSS %0juniper · virtual lightweight collector9 Nis 2026
- CVE-2026-2442937İzleyin
Tenda W30E V2 Hardcoded Default Password for Built-in Account
KritikCVSS 9,3İstismar yokEPSS %0tenda · w30e firmware26 Oca 2026
- CVE-2024-5155537İzleyin
Force Change of Default Credentials
KritikCVSS 9,3İstismar yokEPSS %0abb · aspect-enterprise5 Ara 2024
- CVE-2025-6605037İzleyin
No password set for administrative account in Vivotek IP7137 cameras
KritikCVSS 9,3İstismar yokEPSS %0vivotek · ip7137 firmware9 Oca 2026
- CVE-2024-4955935İzleyin
Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contain(s) an Use of Default Password vulnerability.
YüksekCVSS 8,8İstismar yokEPSS %0dell · smartfabric os1017 Mar 2025
- CVE-2025-276635İzleyin
70mai A510 Use of Default Password Authentication Bypass Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %070mai · a510 firmware6 Haz 2025
- CVE-2023-4304230İzleyin
IBM Storage Virtualize information disclosure
YüksekCVSS 7,5İstismar yokEPSS %0ibm · storage virtualize13 Ara 2023
- CVE-2026-1985130İzleyin
Use of Default Password vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5
YüksekCVSS 7,7İstismar yokEPSS %0dassault systèmes · tuleap enterprise edition25 Ağu 2026
- CVE-2026-263529İzleyin
MLflow Use of Default Password Authentication Bypass Vulnerability
YüksekCVSS 7,3İstismar yokEPSS %1mlflow · mlflow20 Şub 2026