CWE-1393

41 CVEs classified under CWE-1393. Browse by severity and year.

Top CVEs for CWE-1393
CVESeverityScorePublishedSummary
CVE-2025-26701Critical10.02025-03-11An issue was discovered in Percona PMM Server (OVA) before 3.0.0-1.ova. The default service account credentials can lead to SSH access, use of Sudo to root, an…
CVE-2024-51555Critical10.02024-12-05Default Credentail vulnerabilities allows access to an Aspect device using publicly available default credentials since the system does not require the install…
CVE-2026-5269Critical9.82026-07-14In Ciena's Navigator Network Control Suite (NCS) and Manage Control Plan (MCP), there are hidden system accounts used for internal software operations. Some of…
CVE-2026-35075Critical9.82026-06-03An unauthenticated remote attacker can recover a default, hard coded password from a firmware image and thus gain full access to all affected devices.
CVE-2026-33784Critical9.82026-04-09A Use of Default Password vulnerability in the Juniper Networks Support Insights (JSI) Virtual Lightweight Collector (vLWC) allows an unauthenticated, netw…
CVE-2026-22886Critical9.82026-03-03OpenMQ exposes a TCP-based management service (imqbrokerd) that by default requires authentication. However, the product ships with a default administrative ac…
CVE-2026-24429Critical9.82026-01-26Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) ship with a predefined default password for a built-in authentication account th…
CVE-2025-66050Critical9.82026-01-09Vivotek IP7137 camera with firmware version 0200a by default dos not require to provide any password when logging in as an administrator. While it is possible…
CVE-2025-8077Critical9.82025-09-17A vulnerability exists in NeuVector versions up to and including 5.4.5, where a fixed string is used as the default password for the built-in `admin` account…
CVE-2025-27690Critical9.82025-04-10Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.1.0, contains a use of default password vulnerability. An unauthenticated attacker with remote access coul…
CVE-2025-22938Critical9.82025-03-31Adtran 411 ONT L80.00.0011.M2 was discovered to contain weak default passwords.
CVE-2024-50588Critical9.82024-11-08An unauthenticated attacker with access to the local network of the medical office can use known default credentials to gain remote DBA access to the Elefant…
CVE-2023-45249Critical9.82024-07-24Remote command execution due to use of default passwords. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 5.0.1-61, Acroni…
CVE-2024-30802Critical9.82024-05-14An issue in Vehicle Management System 7.31.0.3_20230412 allows an attacker to escalate privileges via the login.html component.
CVE-2024-29666Critical9.82024-03-25Insecure Permissions vulnerability in Vehicle Monitoring platform system CMSV6 v.7.31.0.2 through v.7.32.0.3 allows a remote attacker to escalate privileges vi…
CVE-2023-24049Critical9.82023-12-04An issue was discovered on Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated privileges on the device via poor credential management.
CVE-2023-32090Critical9.82023-08-07Pega platform clients who are using versions 6.1 through 7.3.1 may be utilizing default credentials
CVE-2022-4126Critical9.62023-03-27Use of Default Password vulnerability in ABB RCCMD on Windows, Linux, MacOS allows Try Common or Default Usernames and Passwords.This issue affects RCCMD: befo…
CVE-2026-4404Critical9.42026-03-23Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI.
CVE-2023-25131Critical9.42023-04-24Use of default password vulnerability in PowerPanel Business Local/Remote for Windows v4.8.6 and earlier, PowerPanel Business Management for Windows v4.8.6 and…