The shipped WebUI template database retains the factory default passwords for all five account types in cleartext. Defaults are identical across devices and were unchanged on th...

CVE-2026-22109

The shipped WebUI template database retains the factory default passwords for all five account types in cleartext. Defau

来源摘录 · NVD

Delta UFC500 charging stations derive the default credentials of the Service account from character positions of the device serial number. An unauthenticated attacker with adjac...

CVE-2026-22105

Delta UFC500 charging stations derive the default credentials of the Service account from character positions of the dev

来源摘录 · NVD

The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. Prior to version 26.05, Configuration.getWebApiToken returns the empty str...

CVE-2026-55457

The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. Prior to version

来源摘录 · NVD

DB-GPT through 0.8.2 contains a hardcoded credentials vulnerability in its default docker-compose...

CVE-2026-77933

DB-GPT through 0.8.2 contains a hardcoded credentials vulnerability in its default docker-compose.yml that sets a static

历史摘要 · 未重新核验 · GitHub Advisory

DB-GPT through 0.8.2 contains a hardcoded credentials vulnerability in its default docker-compose.yml that sets a static MYSQL_ROOT_PASSWORD and publishes port 3306 on all inter...

CVE-2026-77933

DB-GPT through 0.8.2 contains a hardcoded credentials vulnerability in its default docker-compose.yml that sets a static

历史摘要 · 未重新核验 · NVD

JuggleIM im-server through 1.8.16 ships default administrator credentials admin/123456 that allow...

CVE-2026-111329

JuggleIM im-server through 1.8.16 ships default administrator credentials admin/123456 that allow unauthenticated remote

历史摘要 · 未重新核验 · GitHub Advisory

A security vulnerability has been detected in PRVTPRO Amnezia-Web-Panel up to 1.6.2/1.7.2. This...

CVE-2026-108783

A security vulnerability has been detected in PRVTPRO Amnezia-Web-Panel up to 1.6.2/1.7.2. This affects an unknown part

历史摘要 · 未重新核验 · GitHub Advisory

A security vulnerability has been detected in PRVTPRO Amnezia-Web-Panel up to 1.6.2/1.7.2. This affects an unknown part of the file app.py of the component Backup Download. The ...

CVE-2026-108783

A security vulnerability has been detected in PRVTPRO Amnezia-Web-Panel up to 1.6.2/1.7.2. This affects an unknown part

历史摘要 · 未重新核验 · NVD

Astron Agent is an agentic workflow platform for building and running AI agents. Prior to 1.1.2, the default workflow code-node path through /console-api/workflow/code/run and /...

CVE-2026-108263

Astron Agent is an agentic workflow platform for building and running AI agents. Prior to 1.1.2, the default workflow co

历史摘要 · 未重新核验 · NVD

Perforce P4 Search container images prior to 2026.4.2 reset the service authentication token to a publicly documented default value. An unauthenticated attacker with network acc...

CVE-2026-100103

Perforce P4 Search container images prior to 2026.4.2 reset the service authentication token to a publicly documented de

历史摘要 · 未重新核验 · NVD

Use of default credentials vulnerability in Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Logsign SIEM allows Try Common or Default Usernames and Passwords...

CVE-2026-90924

Use of default credentials vulnerability in Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Logsign

历史摘要 · 未重新核验 · NVD

A flaw has been found in ningzichun student-management-system up to...

CVE-2026-97649

A flaw has been found in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected b

历史摘要 · 未重新核验 · GitHub Advisory

An example environment-configuration file for a bundled inventory-management component ships with...

CVE-2026-90456

An example environment-configuration file for a bundled inventory-management component ships with a fixed, publicly-know

历史摘要 · 未重新核验 · GitHub Advisory

An example environment-configuration file ships with a fixed, publicly-known secret value used to...

CVE-2026-90451

An example environment-configuration file ships with a fixed, publicly-known secret value used to sign authentication co

历史摘要 · 未重新核验 · GitHub Advisory

An example environment-configuration file for a bundled inventory-management component ships with a fixed, publicly-known administrative password. A deployment that copies this ...

CVE-2026-90456

该条目来自 NVD，描述 CVE-2026-90456：某打包分发的库存管理组件（inventory-management component）在随附的“示例环境配置文件”中内置了一个固定且公开可知的管理员口令。该示例文件本身是部署模板，正

历史摘要 · 未重新核验 · NVD

An example environment-configuration file ships with a fixed, publicly-known secret value used to sign authentication cookies for a bundled packet-analysis component. A deployme...

CVE-2026-90451

CVE-2026-90451 描述的是一类典型的“不安全默认配置/硬编码密钥”缺陷。受影响产品在发布时随附了一份示例环境配置文件（例如示例 .env 或类似的环境变量模板），其中用于对某个内置的数据包分析（packet-analysis）组

历史摘要 · 未重新核验 · NVD

IBM ContextForge MCP Gateway 1.0.0 through 1.0.7 could allow a remote attacker to gain...

CVE-2026-78573

IBM ContextForge MCP Gateway 1.0.0 through 1.0.7 could allow a remote attacker to gain administrative access due to the

历史摘要 · 未重新核验 · GitHub Advisory

IBM ContextForge MCP Gateway 1.0.0 through 1.0.7 could allow a remote attacker to gain administrative access due to the use of default credentials.

CVE-2026-78573

IBM ContextForge MCP Gateway 1.0.0 through 1.0.7 could allow a remote attacker to gain administrative access due to the

历史摘要 · 未重新核验 · NVD

Use of default credentials in Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remote attacker to gain administrative access to the management platform by logg...

CVE-2026-76155

Use of default credentials in Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remote attacker to gain

历史摘要 · 未重新核验 · NVD

GeoLens's authorization and cache-scope flaws disclose private dataset data and metadata to unauthorized users (fixed in 1.2.4)

GeoLens 1.2.4 fixes a set of vulnerabilities, the most serious of which allow authenticated or anonymous users to obtain

历史摘要 · 未重新核验 · GitHub Advisory