A provisioning script used when installing HIPASE-250 (formerly 250 SCALA) engineering workstations sets a fixed, hard-coded x11vnc password. Because the same credential is appl...

CVE-2026-65313

A provisioning script used when installing HIPASE-250 (formerly 250 SCALA) engineering workstations sets a fixed, hard-c

历史摘要 · 未重新核验 · NVD

LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework. Prior to 0.2.154, LazyOwn ships default C2 credentials LazyOwn and LazyOwn in payload.json a...

CVE-2026-68503

LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework. Prior to 0.2.154, LazyOwn ships def

历史摘要 · 未重新核验 · NVD

LazyOwn: Default C2 Operator Credentials Enable Administrative Access to C2 Dashboard

CVE-2026-68503

LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework. Prior to 0.2.154, LazyOwn ships def

历史摘要 · 未重新核验 · OSV.dev

Care Everywhere Gateway 14.3.10 contains a hard-coded credentials vulnerability in the bundled WildFly 8.2.0.Final management interface that allows unauthenticated remote attack...

CVE-2026-41939

Care Everywhere Gateway 14.3.10 contains a hard-coded credentials vulnerability in the bundled WildFly 8.2.0.Final manag

历史摘要 · 未重新核验 · NVD

Pheditor: Authentication Bypass in Forced Password-Change Flow via Unverified Current Password

## Summary The forced password-change flow, triggered when the stored password is still the default (`admin`), does not

历史摘要 · 未重新核验 · GitHub Advisory

SAP Commerce Cloud could retain a sample OAuth2 client with publicly documented sample...

CVE-2026-44761

SAP Commerce Cloud could retain a sample OAuth2 client with publicly documented sample credentials originating from samp

历史摘要 · 未重新核验 · GitHub Advisory

SAP Commerce Cloud could retain a sample OAuth2 client with publicly documented sample credentials originating from sample configuration provided in SAP Help Portal documentatio...

CVE-2026-44761

SAP Commerce Cloud 存在一个高危漏洞，原因在于其保留了 SAP Help Portal 文档中公开的示例 OAuth2 客户端凭证。默认情况下，系统包含一个带有公开已知凭据的示例 OAuth2 客户端。如果管理员未在部署后

历史摘要 · 未重新核验 · NVD

IBM API Connect 12.1.0.0 through 12.1.0.3 uses default credentials which could allow an attacker to gain unauthorized access to the application before the system enforces a cred...

CVE-2026-3144

IBM API Connect 12.1.0.0 through 12.1.0.3 uses default credentials which could allow an attacker to gain unauthorized ac

历史摘要 · 未重新核验 · NVD

JAIOTlink C492A-W6 Wi-Fi IP cameras running firmware 4.8.30.57701411 contain a hard-coded credentials vulnerability that allows network-adjacent attackers to gain unauthorized a...

CVE-2026-58453

JAIOTlink C492A-W6 Wi-Fi IP cameras running firmware 4.8.30.57701411 contain a hard-coded credentials vulnerability that

历史摘要 · 未重新核验 · NVD

OpenProject is open-source, web-based project management software. Prior to , the official openproject/openproject Docker image ships ENV SECRET_KEY_BASE=OVERWRITE_ME as the def...

CVE-2026-46386

OpenProject is open-source, web-based project management software. Prior to , the official openproject/openproject Docke

历史摘要 · 未重新核验 · NVD

Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain a Use of Default...

CVE-2026-44273

Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain a Use of Default Credentials vulnerability. A high

历史摘要 · 未重新核验 · GitHub Advisory

Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain a Use of Default Credentials vulnerability. A high privileged attacker with local access could potentially ...

CVE-2026-44273

Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain a Use of Default Credentials vulnerability. A high

历史摘要 · 未重新核验 · NVD

Dell AIOps Collector versions prior to 1.18.3 contain a "Use of Default Credentials"...

CVE-2026-32652

Dell AIOps Collector versions prior to 1.18.3 contain a "Use of Default Credentials" vulnerability. A low privileged att

历史摘要 · 未重新核验 · GitHub Advisory

Brickcom cameras ship with default credentials that allows any unauthenticated remote attacker to...

CVE-2026-50005

Brickcom cameras ship with default credentials that allows any unauthenticated remote attacker to silently access camera

历史摘要 · 未重新核验 · GitHub Advisory

Brickcom cameras ship with default credentials that allows any unauthenticated remote attacker to silently access camera feeds.

CVE-2026-50005

Brickcom cameras ship with default credentials that allows any unauthenticated remote attacker to silently access camera

历史摘要 · 未重新核验 · NVD

Use of default credentials vulnerability in Roche Diagnostics navify Digital Pathology (RabbitMQ...

CVE-2026-9844

Use of default credentials vulnerability in Roche Diagnostics navify Digital Pathology (RabbitMQ Management interface mo

历史摘要 · 未重新核验 · GitHub Advisory

Use of default credentials vulnerability in Roche Diagnostics navify Digital Pathology (RabbitMQ Management interface modules) allows Default Usernames and Passwords. This issue...

CVE-2026-9844

Use of default credentials vulnerability in Roche Diagnostics navify Digital Pathology (RabbitMQ Management interface mo

历史摘要 · 未重新核验 · NVD

The Danelec MacGregor Voyage Data Recorder device includes a default username and password, with...

CVE-2026-42941

The Danelec MacGregor Voyage Data Recorder device includes a default username and password, with no enforced password c

历史摘要 · 未重新核验 · GitHub Advisory

The Danelec MacGregor Voyage Data Recorder device includes a default username and password, with no enforced password change.

CVE-2026-42941

The Danelec MacGregor Voyage Data Recorder device includes a default username and password, with no enforced password c

历史摘要 · 未重新核验 · NVD

RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.2, the internode RPC layer authenticates every request with an HMAC-SHA256 signature using a sha...

CVE-2026-45039

RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.2, the internode RPC layer authenticate

历史摘要 · 未重新核验 · NVD