agentprime: CWE-1392

CVE-2026-94459: IRISPowerscan Default accounts with predictable credentials

Wed, 04 Nov 2026 09:11:26 GMT

CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-112354: Etrel INCH AC Charging Station Hard-coded Default Credentials

Tue, 03 Nov 2026 21:05:28 GMT

CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-22105: Use of default password based on serial number

Fri, 30 Oct 2026 10:34:23 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-22109: Default WebUI passwords stored in plaintext

Fri, 30 Oct 2026 10:34:21 GMT

CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-77056: Use of Default Credentials in boneIO

Mon, 26 Oct 2026 14:45:53 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-19741: OpenThread joiner autostart uses a publicly documented default Joining Device Credential (PSKd)

Fri, 23 Oct 2026 19:56:12 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-55457: Goobi viewer: Empty webapi.authorization.token default permits unauthenticated authorization bypass

Fri, 23 Oct 2026 14:16:27 GMT

CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-77933: DB-GPT through 0.8.2 Hardcoded MySQL Root Credentials in docker-compose Deployment

Tue, 20 Oct 2026 00:46:12 GMT

CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-112296: FlyCms through commit edfdf724 Default Super Administrator Credentials

Mon, 19 Oct 2026 13:55:36 GMT

CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-111998: Vanus 0.8.0 through 0.9.0 Default Admin Credentials via Gateway

Sun, 18 Oct 2026 11:38:24 GMT

CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-111693: DataBuff ai-apm-web through 0.1.10 Hard-Coded Default Admin Credentials

Fri, 16 Oct 2026 17:39:48 GMT

CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-111329: JuggleIM im-server through 1.8.16 Default Admin Credentials in Admin Console

Thu, 15 Oct 2026 21:43:33 GMT

CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-108783: PRVTPRO Amnezia-Web-Panel Backup Download app.py default credentials

Mon, 12 Oct 2026 00:45:19 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-108263: Astron Agent: Unsandboxed code-node leads to cross-tenant RCE

Fri, 09 Oct 2026 20:47:38 GMT

CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-100103: Authentication bypass via default auth token in P4Search

Mon, 05 Oct 2026 08:19:47 GMT

CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-90924: Default Admin Credentials in Innotim Software's Logsign SIEM

Mon, 28 Sep 2026 13:53:46 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-97064: X-SpringBoot through 6.0 Authentication Bypass via Static Master Code

Fri, 25 Sep 2026 18:12:19 GMT

CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-97649: ningzichun student-management-system example_lite.sql default credentials

Fri, 25 Sep 2026 01:45:20 GMT

CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-90940: novel-plus through 5.3.3 Default Cache Management Password in the Front Portal

Mon, 14 Sep 2026 13:58:43 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-90498: lenve vhr vhr.sql default credentials

Sun, 13 Sep 2026 06:15:16 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-90456: Use of default credentials in Malcolm

Fri, 11 Sep 2026 21:52:17 GMT

CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-90451: Use of Default Credentials in Malcolm

Fri, 11 Sep 2026 21:50:31 GMT

CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-78573: IBM ContextForge MCP Gateway is affected by use of default credentials

Thu, 10 Sep 2026 21:42:36 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-86464: Information disclosure in Eclipse Foundation Eclipse aeriOS

Tue, 08 Sep 2026 19:43:28 GMT

CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-76155: Datiphy Data Management Center - Use of Default Credentials

Fri, 21 Aug 2026 01:40:36 GMT

CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

GeoLens's authorization and cache-scope flaws disclose private dataset data and metadata to unauthorized users (fixed in 1.2.4)

Wed, 19 Aug 2026 19:22:59 GMT

geolens <1.2.4, fixed in 1.2.4. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-65313: Use of hard-coded VNC credentials in the engineering-workstation provisioning

Fri, 31 Jul 2026 07:34:11 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-68503: LazyOwn: Default C2 Operator Credentials Enable Administrative Access to C2 Dashboard

Thu, 30 Jul 2026 20:39:34 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-41939: Care Everywhere Gateway 14.3.10 Hard-coded Credentials RCE via WildFly

Wed, 29 Jul 2026 17:39:08 GMT

CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

Pheditor: Authentication Bypass in Forced Password-Change Flow via Unverified Current Password

Fri, 24 Jul 2026 21:54:24 GMT

pheditor/pheditor <2.0.8, fixed in 2.0.8. CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-44761: Insecure Sample Credentials in SAP Commerce Cloud

Tue, 14 Jul 2026 00:20:29 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-3144: IBM API Connect Default Credentials

Wed, 08 Jul 2026 15:22:31 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-58466: AutoBangumi < 3.2.8 - Hard-coded Default Credentials via add_default_user()

Thu, 02 Jul 2026 19:56:47 GMT

CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-58453: JAIOTlink C492A-W6 4.8.30.57701411 Hard-coded Credentials via anyka_ipc

Wed, 01 Jul 2026 15:33:41 GMT

CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-46386: OpenProject: Pre-authentication RCE in openproject/openproject Docker image via default `SECRET_KEY_BASE=OVERWRITE_ME` and `cookies_serializer = :marshal`

Fri, 26 Jun 2026 19:26:39 GMT

CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-44273: Dell Wyse Management Suite (WMS): Dell Wyse Management Suite (WMS), versions prior to WMS 2605…

Mon, 22 Jun 2026 18:51:37 GMT

CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-32652: Dell AIOps Collector versions prior to 1.18.3 contain a "Use of Default Credentials" vulnerability.

Wed, 17 Jun 2026 15:29:33 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-50005: Brickcom Cameras Use of Default Credentials

Thu, 11 Jun 2026 19:49:17 GMT

CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-9844: Vulnerability in navify® Digital Pathology

Tue, 02 Jun 2026 13:23:45 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-42941: MacGregor Voyage Data Recorder (VDR) G4e Use of Default Credentials

Fri, 29 May 2026 17:27:29 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-45039: RustFS: Internode RPC HMAC secret falls back to public default credential, enabling peer impersonation

Thu, 28 May 2026 18:39:54 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-7365: IBM Operations Analytics - Log Analysis is affected by Information disclosure due to default passwords not being forced to be changed on post-installation

Wed, 27 May 2026 13:55:22 GMT

CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-36221: Vulnerabilities exists in IBM Cloud Pak for Data System (CPDS 1.0) - Cyclops.

Tue, 26 May 2026 15:55:41 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-44159: Tyler Identity Local (TID-L) default administrative credentials

Tue, 19 May 2026 13:45:06 GMT

CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-7428: Insecure default administrative credentials in AlloyDB for PostgreSQL

Tue, 12 May 2026 09:16:35 GMT

CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

NornicDB has Improper Network Binding in its Bolt Server, allowing unauthorized remote access

Wed, 22 Apr 2026 22:03:43 GMT

github.com/orneryd/nornicdb <1.0.42-hotfix, fixed in 1.0.42-hotfix. CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2023-27573: netbox-community netbox-docker: netbox-docker before 2.5.0 has a superuser account with default credentials (admin…

Wed, 11 Mar 2026 00:00:00 GMT

CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-31837: Istio JWKS resolver to prevent private key material from being exposed when JWKS fetch fails.

Tue, 10 Mar 2026 21:57:44 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-28713: Default credentials set for local privileged user in Virtual Appliance.

Thu, 05 Mar 2026 23:51:30 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-22886: Weak credentials in Eclipse Foundation Eclipse OpenMQ

Tue, 03 Mar 2026 09:18:46 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.