CWE-1392 · Authentication
Use of Default Credentials
131CVEs
SortMost likely exploited
131 CVEs with CWE-1392 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2026-26341CheckTattile Camera < 1.181.5 - Default LoginTattile s.r.l. · Smart+ · CVSS 9.3 · 2026-02-24 | 9.3 | 2.9% | 2026-02-24 |
| CVE-2026-58453JAIOTlink C492A-W6 4.8.30.57701411 Hard-coded Credentials via anyka_ipcJAIOTlink · C492A-W6 Wi-Fi IP Camera · CVSS 9.8 · 2026-07-01 | 9.8 | 1.9% | 2026-07-01 |
| CVE-2024-4007Hard coded default credential contained in install packageABB · ASPECT Enterprise (ASP-ENT-x) · CVSS 8.8 · 2024-07-01 | 8.8 | 1.5% | 2024-07-01 |
| CVE-2023-30801qBittorrent Web UI Default Credentials Lead to RCEqBittorrent · qBittorrent client · CVSS 9.8 · 2023-10-10 | 9.8 | 1.2% | 2023-10-10 |
| CVE-2026-41939Care Everywhere Gateway 14.3.10 Hard-coded Credentials RCE via WildFlyCare Everywhere LLC · Care Everywhere Gateway · CVSS 9.8 · 2026-07-29 | 9.8 | 1.1% | 2026-07-29 |
| CVE-2025-5124Sony SNC-M1 Administrative Interface default credentialsSony · SNC-M1 · CVSS 8.1 · 2025-05-24 | 8.1 | 1.0% | 2025-05-24 |
| CVE-2025-1160SourceCodester Employee Management System index.php default credentialsSourceCodester · Employee Management System · CVSS 7.3 · 2025-02-10 | 7.3 | 0.9% | 2025-02-10 |
| CVE-2025-652970mai M300 Telnet Service default credentials70mai · M300 · CVSS 8.8 · 2025-06-23 | 8.8 | 0.9% | 2025-06-23 |
| CVE-2023-30603Hitron Technologies Inc. CODA-5310 - Using default credentialsHitron Technologies Inc. · Hitron CODA-5310 · CVSS 9.8 · 2023-06-02 | 9.8 | 0.8% | 2023-06-02 |
| CVE-2026-58466AutoBangumi < 3.2.8 - Hard-coded Default Credentials via add_default_user()EstrellaXD · Auto_Bangumi · CVSS 9.8 · 2026-07-02 | 9.8 | 0.8% | 2026-07-02 |
| CVE-2025-10542Insecure Default Admin Credentials Enable Full Administrative Access in iMonitor EAMiMonitor Software Inc. · iMonitor EAM · CVSS 9.8 · 2025-09-25 | 9.8 | 0.8% | 2025-09-25 |
| CVE-2024-39747IBM Sterling Connect:Direct Web Services information disclosureIBM · Sterling Connect:Direct Web Services · CVSS 8.1 · 2024-08-31 | 8.1 | 0.8% | 2024-08-31 |
| CVE-2025-8731TRENDnet TI-G160i/TI-PG102i/TPL-430AP SSH Service default credentialsTRENDnet · TI-G160i · CVSS 9.8 · 2025-08-08 | 9.8 | 0.8% | 2025-08-08 |
| CVE-2026-68503LazyOwn: Default C2 Operator Credentials Enable Administrative Access to C2 Dashboardgrisuno · LazyOwn · CVSS 9.8 · 2026-07-30 | 9.8 | 0.8% | 2026-07-30 |
| CVE-2025-1194370mai X200 HTTP Web Server default credentials70mai · X200 · CVSS 7.3 · 2025-10-19 | 7.3 | 0.7% | 2025-10-19 |
| CVE-2026-26366JUNG eNet SMART HOME server 2.2.1/2.3.1 Use of Default CredentialsJUNG · eNet SMART HOME server · CVSS 9.8 · 2026-02-15 | 9.8 | 0.7% | 2026-02-15 |
| CVE-2026-111998Vanus 0.8.0 through 0.9.0 Default Admin Credentials via Gatewayvanus-labs · vanus · CVSS 9.8 · 2026-10-18 | 9.8 | 0.7% | 2026-10-18 |
| CVE-2026-111329JuggleIM im-server through 1.8.16 Default Admin Credentials in Admin Consolejuggleim · JuggleIM · CVSS 9.8 · 2026-10-15 | 9.8 | 0.7% | 2026-10-15 |
| CVE-2026-1803Ziroom ZHOME A0101 Dropbear SSH Service default credentialsZiroom · ZHOME A0101 · CVSS 8.1 · 2026-02-03 | 8.1 | 0.7% | 2026-02-03 |
| CVE-2026-1972Edimax BR-6208AC auth_check_userpass2 default credentialsEdimax · BR-6208AC · CVSS 5.3 · 2026-02-06 | 5.3 | 0.7% | 2026-02-06 |
| CVE-2025-0482Fanli2012 native-php-cms user_recoverpwd.php default credentialsFanli2012 · native-php-cms · CVSS 7.3 · 2025-01-15 | 7.3 | 0.7% | 2025-01-15 |
| CVE-2024-29844Default credentials on web interface of Evolution Controller Versions allows attackers to login and perform administrative functionsCS Technologies Australia · Evolution Controller · CVSS 9.8 · 2024-04-14 | 9.8 | 0.6% | 2024-04-14 |
| CVE-2023-3703Proscend Advice ICR Series routers fw version 1.76Proscend Advice · ICR Series routers FW · CVSS 10 · 2023-09-03 | 10.0 | 0.6% | 2023-09-03 |
| CVE-2025-51536Austrian Archaeological Institute (AI) OpenAtlas v8.11.0 as discovered to contain a hardcoded Administrator password.Craws · Openatlas · CVSS 9.8 · 2025-08-04 | 9.8 | 0.6% | 2025-08-04 |
| CVE-2023-49621A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.7). The "intermediate installation" system state of the affected application uses default credential with…Siemens · SIMATIC CN 4100 · CVSS 9.8 · 2024-01-09 | 9.8 | 0.6% | 2024-01-09 |
| CVE-2025-2398China Mobile P22g-CIac CLI su Command default credentialsChina Mobile · P22g-CIac · CVSS 7.2 · 2025-03-17 | 7.2 | 0.6% | 2025-03-17 |
| CVE-2025-29521Insecure default credentials for the Adminsitrator account of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to escalate privileges via a bruteforce at…Dlink · Dsl-7740c Firmware · CVSS 5.3 · 2025-08-25 | 5.3 | 0.6% | 2025-08-25 |
| CVE-2025-34516Ilevia EVE X1 Server 4.7.18.0.eden Use of Default CredentialsIlevia Srl. · EVE X1 Server · CVSS 9.3 · 2025-10-16 | 9.3 | 0.6% | 2025-10-16 |
| CVE-2024-54015A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.90), SIPROTEC 5 6MD85 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 6MD86 (CP300) (All ver…Siemens · SIPROTEC 5 6MD84 (CP300) · CVSS 7.5 · 2025-02-11 | 7.5 | 0.6% | 2025-02-11 |
| CVE-2026-78573IBM ContextForge MCP Gateway is affected by use of default credentialsIBM · ContextForge MCP Gateway · CVSS 9.8 · 2026-09-10 | 9.8 | 0.6% | 2026-09-10 |
| CVE-2024-5245NETGEAR ProSAFE Network Management System Default Credentials Local Privilege Escalation VulnerabilityNETGEAR · ProSAFE Network Management System · CVSS 7.8 · 2024-05-23 | 7.8 | 0.6% | 2024-05-23 |
| CVE-2023-27573netbox-docker before 2.5.0 has a superuser account with default credentials (admin password for the admin account, and 0123456789abcdef0123456789abcdef01234567 value for SUPERUSER…netbox-community · netbox-docker · CVSS 9 · 2026-03-11 | 9.0 | 0.6% | 2026-03-11 |
| CVE-2025-8530elunez eladmin Druid application-prod.yml default credentialselunez · eladmin · CVSS 5.3 · 2025-08-04 | 5.3 | 0.6% | 2025-08-04 |
| CVE-2024-7898Tosei Online Store Management System ネット店舗管理システム Backend default credentialsTosei · Online Store Management System ネット店舗管理システム · CVSS 7.3 · 2024-08-17 | 7.3 | 0.6% | 2024-08-17 |
| CVE-2026-90940novel-plus through 5.3.3 Default Cache Management Password in the Front Portal201206030 · novel-plus · CVSS 5.3 · 2026-09-14 | 5.3 | 0.5% | 2026-09-14 |
| CVE-2026-112354Etrel INCH AC Charging Station Hard-coded Default CredentialsEtrel d.o.o. · Etrel INCH · CVSS 9.8 · 2026-11-03 | 9.8 | 0.5% | 2026-11-03 |
| CVE-2025-29629Gardyn Home Kit firmware before master.619, Home Kit Mobile Application before 2.11.0, and Home Kit Cloud API before 2.12.2026 use weak default credentials for secure shell access…Gardyn · Home Kit Firmware · CVSS 9.1 · 2025-07-25 | 9.1 | 0.5% | 2025-07-25 |
| CVE-2024-7746Use of default credentials at Traccar fleet management solutionTraccar · Server · CVSS 9.5 · 2024-08-13 | 9.5 | 0.5% | 2024-08-13 |
| CVE-2024-6535Skupper: potential authentication bypass to skupper console via forged cookiesRed Hat · Service Interconnect 1.4 for RHEL 9 · CVSS 5.3 · 2024-07-17 | 5.3 | 0.5% | 2024-07-17 |
| CVE-2025-7907yangzongzhuan RuoYi Druid application-druid.yml default credentialsyangzongzhuan · RuoYi · CVSS 4.3 · 2025-07-20 | 4.3 | 0.5% | 2025-07-20 |
| CVE-2026-27751SODOLA SL902-SWTGW124AS <= 200.1.20 Use of Default CredentialsShenzhen Hongyavision Technology Co., Ltd. (Sodola Networks) · SODOLA SL902-SWTGW124AS · CVSS 9.8 · 2026-02-27 | 9.8 | 0.5% | 2026-02-27 |
| CVE-2024-6788Phoenix Contact: update feature from CHARX controller can be used to reset a low privilege user passwordPHOENIX CONTACT · CHARX SEC-3000 · CVSS 8.6 · 2024-08-13 | 8.6 | 0.5% | 2024-08-13 |
| CVE-2026-44761Insecure Sample Credentials in SAP Commerce CloudSAP_SE · SAP Commerce Cloud · CVSS 9.1 · 2026-07-14 | 9.1 | 0.5% | 2026-07-14 |
| CVE-2025-51535Austrian Archaeological Institute (AI) OpenAtlas v8.11.0 as discovered to contain a SQL injection vulnerability.Craws · Openatlas · CVSS 9.1 · 2025-08-04 | 9.1 | 0.5% | 2025-08-04 |
| CVE-2026-111693DataBuff ai-apm-web through 0.1.10 Hard-Coded Default Admin Credentialsdatabufflabs · databuff · CVSS 9.8 · 2026-10-16 | 9.8 | 0.5% | 2026-10-16 |
| CVE-2026-76155Datiphy Data Management Center - Use of Default CredentialsDatiphy Inc. · Data Management Center · CVSS 9.3 · 2026-08-21 | 9.3 | 0.5% | 2026-08-21 |
| CVE-2024-4622alpitronic Hypercharger EV Charger Use of Default Credentialsalpitronic · Hypercharger EV Charger · CVSS 8.3 · 2024-05-15 | 8.3 | 0.5% | 2024-05-15 |
| CVE-2026-125384INDOTALENT WHMS before 10.20261109 Default Administrator Credentials via UserAdminSeedergo2ismail · Asp.Net-Core-Inventory-Order-Management-System · CVSS 9.8 · 2026-11-09 | 9.8 | 0.5% | 2026-11-09 |
| CVE-2026-44159Tyler Identity Local (TID-L) default administrative credentialsTyler Technologies · TID-L · CVSS 9.8 · 2026-05-19 | 9.8 | 0.5% | 2026-05-19 |
| CVE-2026-90498lenve vhr vhr.sql default credentialslenve · vhr · CVSS 7.3 · 2026-09-13 | 7.3 | 0.5% | 2026-09-13 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.