CWE-1188 · Misconfiguration and Insecure Design
Initialization of a Resource with an Insecure Default
286CVEs
4exploited
7with a public check
9likely (EPSS 10%+)
SortMost likely exploited
286 CVEs with CWE-1188 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2023-27524In CISA KEVExploitedApache Superset - Authentication BypassApache Software Foundation · Apache Superset · CVSS 8.9 · 2023-04-24 | 8.9 | 98% | 2023-04-24 |
| CVE-2022-24706In CISA KEVExploitedCouchDB Erlang Distribution - Remote Command ExecutionApache Software Foundation · Apache CouchDB · CVSS 9.8 · 2022-04-26 | 9.8 | 93% | 2022-04-26 |
| CVE-2025-48927In CISA KEVExploitedThe TeleMessage service through 2025-05-05 configures Spring Boot Actuator with an exposed heap dump endpoint at a /heapdump URI, as exploited in the wild in May 2025.TeleMessage · service · CVSS 5.3 · 2025-05-28 | 5.3 | 12% | 2025-05-28 |
| CVE-2023-6448In CISA KEVExploitedUnitronics VisiLogic uses a default administrative passwordUnitronics · VisiLogic · CVSS 9.8 · 2023-12-05 | 9.8 | 2.1% | 2023-12-05 |
| CVE-2021-35336CheckTieline IP Audio Gateway <=2.6.4.8 - Unauthorized Remote Admin Panel AccessTieline · Ip Audtio Gateway Firmware · 2021-07-01 | – | 10% | 2021-07-01 |
| CVE-2021-41192CheckRedash Setup Configuration - Default Secrets Disclosuregetredash · redash · CVSS 8.1 · 2021-11-23 | 8.1 | 8.1% | 2021-11-23 |
| CVE-2024-32114CheckApache ActiveMQ 6.x < 6.1.2 - Broken Access ControlApache Software Foundation · Apache ActiveMQ · CVSS 8.5 · 2024-05-02 | 8.5 | 7.1% | 2024-05-02 |
| CVE-2022-25568CheckMotionEye Config Info DisclosureMotioneye Project · Motioneye · 2022-03-24 | – | 6.9% | 2022-03-24 |
| CVE-2024-22207CheckFastify Swagger-UI - Information Disclosurefastify · fastify-swagger-ui · CVSS 5.3 · 2024-01-15 | 5.3 | 2.3% | 2024-01-15 |
| CVE-2026-52824CheckKimai <= 2.57.0 - Default APP_SECRET Authentication Bypasskimai · kimai · CVSS 9.1 · 2026-09-15 | 9.1 | 1.3% | 2026-09-15 |
| CVE-2025-2129CheckMage AI - Insecure Default Authentication SetupMage AI · CVSS 5.6 · 2025-03-09 | 5.6 | 1.1% | 2025-03-09 |
| CVE-2020-11532Zoho ManageEngine DataSecurity Plus prior to 6.0.1 uses default admin credentials to communicate with a DataEngine Xnode server. This allows an attacker to bypass authentication f…Zohocorp · Manageengine Datasecurity Plus · 2020-05-08 | – | 77% | 2020-05-08 |
| CVE-2024-2758CVE-2024-2758Tempesta · Tempesta FW · CVSS 6.3 · 2024-04-03 | 6.3 | 68% | 2024-04-03 |
| CVE-2026-66066Action Pack: Possible arbitrary file read and remote code execution in Active Storage variant processingrails · rails · CVSS 9.5 · 2026-07-30 | 9.5 | 33% | 2026-07-30 |
| CVE-2020-14011Lansweeper 6.0.x through 7.2.x has a default installation in which the admin password is configured for the admin account, unless "Built-in admin" is manually unchecked. This allo…Lansweeper · Lansweeper · 2020-06-15 | – | 29% | 2020-06-15 |
| CVE-2018-8014The defaults settings for the CORS filter provided in Apache Tomcat 9.0.0.M1 to 9.0.8, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, 7.0.41 to 7.0.88 are insecure and enable 'supportsCred…Apache Software Foundation · Apache Tomcat · 2018-05-16 | – | 21% | 2018-05-16 |
| CVE-2021-38759Raspberry Pi OS through 5.10 has the raspberry default password for the pi account. If not changed, attackers can gain administrator privileges.Raspberrypi · Raspberry Pi Os Lite · 2021-12-07 | – | 16% | 2021-12-07 |
| CVE-2017-4971An issue was discovered in Pivotal Spring Web Flow through 2.4.4. Applications that do not change the value of the MvcViewFactoryCreator useSpringBinding property which is disable…Broadcom · Spring Web Flow · 2017-06-13 | – | 15% | 2017-06-13 |
| CVE-2017-5178An issue was discovered in Schneider Electric Tableau Server/Desktop Versions 7.0 to 10.1.3 in Wonderware Intelligence Versions 2014R3 and prior. These versions contain a system a…Schneider-Electric · Schneider Electric Wonderware Intelligence 2014R3 and prior · 2017-03-08 | – | 14% | 2017-03-08 |
| CVE-2018-15685GitHub Electron 1.7.15, 1.8.7, 2.0.7, and 3.0.0-beta.6, in certain scenarios involving IFRAME elements and "nativeWindowOpen: true" or "sandbox: true" options, is affected by a We…Electronjs · Electron · 2018-08-23 | – | 10% | 2018-08-23 |
| CVE-2019-5367A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.Hp · HPE Intelligent Management Center (IMC) PLAT · 2019-06-05 | – | 8.0% | 2019-06-05 |
| CVE-2017-12739An issue was discovered on Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00, ERAC00, ETA2, ETLS00, MODi00, and DNPi00. The integrated web server (port 80/t…Siemens · Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00, ERAC0… · 2017-11-15 | – | 5.6% | 2017-11-15 |
| CVE-2019-7252Linear eMerge E3-Series devices have Default Credentials.Nortekcontrol · Linear Emerge Essential Firmware · 2019-07-02 | – | 4.9% | 2019-07-02 |
| CVE-2018-15350Router Default Credentials in Kraftway 24F2XG Router firmware version 3.5.30.1118 allow remote attackers to get privileged access to the router.Kaspersky Lab · Kraftway · 2018-08-17 | – | 4.7% | 2018-08-17 |
| CVE-2018-19275The BluStar component in Mitel InAttend before 2.5 SP3 and CMG before 8.4 SP3 Suite Servers has a default password, which could allow remote attackers to gain unauthorized access…Mitel · Inattend · 2019-04-02 | – | 4.6% | 2019-04-02 |
| CVE-2020-16873Xamarin.Forms Spoofing VulnerabilityMicrosoft · xamarin.forms · CVSS 4.7 · 2020-09-11 | 4.7 | 4.0% | 2020-09-11 |
| CVE-2014-0234The default configuration of broker.conf in Red Hat OpenShift Enterprise 2.x before 2.1 has a password of "mooo" for a Mongo account, which allows remote attackers to hijack the b…Redhat · Red Hat OpenShift Enterprise · 2020-02-12 | – | 3.8% | 2020-02-12 |
| CVE-2019-5490Certain versions between 2.x to 5.x (refer to advisory) of the NetApp Service Processor firmware were shipped with a default account enabled that could allow unauthorized arbitrar…NetApp, Inc. · NetApp Service Processor · 2019-03-21 | – | 3.5% | 2019-03-21 |
| CVE-2019-15304Lierda Grill Temperature Monitor V1.00_50006 has a default password of admin for the admin account, which allows an attacker to cause a Denial of Service or Information Disclosure…Progradegrill · Wifi Grilling Thermometer Firmware · 2019-08-26 | – | 3.4% | 2019-08-26 |
| CVE-2017-5491wp-mail.php in WordPress before 4.7.1 might allow remote attackers to bypass intended posting restrictions via a spoofed mail server with the mail.example.com name.Wordpress · Wordpress · 2017-01-15 | – | 3.2% | 2017-01-15 |
| CVE-2019-14222An issue was discovered in Alfresco Community Edition versions 6.0 and lower. An unauthenticated, remote attacker could authenticate to Alfresco's Solr Web Admin Interface. The vu…Alfresco · Alfresco · 2019-09-05 | – | 2.9% | 2019-09-05 |
| CVE-2020-4001The SD-WAN Orchestrator 3.3.2, 3.4.x, and 4.0.x has default passwords allowing for a Pass-the-Hash Attack. SD-WAN Orchestrator ships with default passwords for predefined accounts…Vmware · VMware SD-WAN Orchestrator · 2020-11-24 | – | 2.9% | 2020-11-24 |
| CVE-2019-5497NetApp AFF A700s Baseboard Management Controller (BMC) firmware versions 1.22 and higher were shipped with a default account enabled that could allow unauthorized arbitrary comman…NetApp · AFF A700s Baseboard Management Controller · 2019-07-01 | – | 2.9% | 2019-07-01 |
| CVE-2018-5770An issue was discovered on Tenda AC15 devices. A remote, unauthenticated attacker can make a request to /goform/telnet, creating a telnetd service on the device. This service is p…Tendacn · Ac15 Firmware · 2018-03-20 | – | 2.7% | 2018-03-20 |
| CVE-2017-6750A vulnerability in AsyncOS for the Cisco Web Security Appliance (WSA) could allow an unauthenticated, local attacker to log in to the device with the privileges of a limited user…Cisco · Cisco Web Security Appliance · 2017-07-25 | – | 2.7% | 2017-07-25 |
| CVE-2020-27555Use of default credentials for the telnet server in BASETech GE-131 BT-1837836 firmware 20180921 allows remote attackers to execute arbitrary system commands as the root user.Basetech · Ge-131 Bt-1837836 Firmware · 2020-11-17 | – | 2.5% | 2020-11-17 |
| CVE-2017-7964Zyxel WRE6505 devices have a default TELNET password of 1234 for the root and admin accounts, which makes it easier for remote attackers to conduct DNS hijacking attacks by reconf…Zyxel · Wre6505 Firmware · 2017-04-19 | – | 2.5% | 2017-04-19 |
| CVE-2020-7729Arbitrary Code ExecutionGruntjs · grunt · CVSS 7.1 · 2020-09-03 | 7.1 | 2.3% | 2020-09-03 |
| CVE-2019-11618doorGets 7.0 has a default administrator credential vulnerability. A remote attacker can use this vulnerability to gain administrator privileges for the creation and modification…Doorgets · Doorgets Cms · 2019-04-30 | – | 2.3% | 2019-04-30 |
| CVE-2017-6692A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker to log in to the device with the privileges of the root user, aka a…Cisco · Cisco Ultra Services Framework Element Manager · 2017-06-13 | – | 2.3% | 2017-06-13 |
| CVE-2017-6688A vulnerability in Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an affected system as the Linux root user, aka an Insecure Default…Cisco · Cisco Elastic Services Controller · 2017-06-13 | – | 2.3% | 2017-06-13 |
| CVE-2017-6684A vulnerability in Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an affected system as the Linux admin user, aka an Insecure Defaul…Cisco · Cisco Elastic Services Controller · 2017-06-13 | – | 2.3% | 2017-06-13 |
| CVE-2019-3909Premisys Identicard version 3.1.190 database uses default credentials. Users are unable to change the credentials without vendor intervention.Identicard · Premisys Identicard 3.1.190 · 2019-01-18 | – | 2.3% | 2019-01-18 |
| CVE-2020-26510Airleader Master <= 6.21 devices have default credentials that can be used to access the exposed Tomcat Manager for deployment of a new .war file, with resultant remote code execu…Airleader · Airleader Master Control · 2020-11-16 | – | 2.2% | 2020-11-16 |
| CVE-2017-8021EMC Elastic Cloud Storage (ECS) before 3.1 is affected by an undocumented account vulnerability that could potentially be leveraged by malicious users to compromise the affected s…Dell · EMC Elastic Cloud Storage all versions prior to 3.1 · 2017-10-02 | – | 2.1% | 2017-10-02 |
| CVE-2017-8218vsftpd on TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n has a backdoor admin account with the 1234 password, a backdoor guest account with…Tp-Link · C2 Firmware · 2017-04-25 | – | 2.1% | 2017-04-25 |
| CVE-2022-40468Potential leak of left-over heap data if custom error page templates containing special non-standard variables are used. Tinyproxy commit 84f203f and earlier use uninitialized buf…Tinyproxy Project · Tinyproxy · 2022-09-19 | – | 2.0% | 2022-09-19 |
| CVE-2023-45312In the mtproto_proxy (aka MTProto proxy) component through 0.7.2 for Erlang, a low-privileged remote attacker can access an improperly secured default installation without authent…Mtproto · Mt Proto Proxy · CVSS 8.8 · 2023-10-10 | 8.8 | 1.9% | 2023-10-10 |
| CVE-2018-1524IBM Maximo Asset Management 7.6 through 7.6.3 installs with a default administrator account that a remote intruder could use to gain administrator access to the system. This vulne…IBM · Maximo Asset Management · CVSS 8.8 · 2018-08-03 | 8.8 | 1.8% | 2018-08-03 |
| CVE-2018-10968On D-Link DIR-550A and DIR-604M devices through v2.10KR, a malicious user can use a default TELNET account to get unauthorized access to vulnerable devices, aka a backdoor access…D-Link · Dir-550a Firmware · 2018-05-18 | – | 1.7% | 2018-05-18 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.