CWE-1392

CVEs per yearBy the year they were published

1. 20233
2. 202424
3. 202548
4. 202659

Newest CVEs

• CVE-2026-94459

  IRISPowerscan Default accounts with predictable credentials

  I.R.I.S S.A. · IRISPowerscan

  High7.2
• CVE-2026-112354

  Etrel INCH AC Charging Station Hard-coded Default Credentials

  Etrel d.o.o. · Etrel INCH

  Critical9.3
• CVE-2026-22105

  Use of default password based on serial number

  Delta Electronics · Delta UFC500

  High8.7
• CVE-2026-22109

  Default WebUI passwords stored in plaintext

  Delta Electronics · Delta UFC500

  High8.4
• CVE-2026-77056

  Use of Default Credentials in boneIO

  boneIO · black_debian_images

  High7.1
• CVE-2026-19741

  OpenThread joiner autostart uses a publicly documented default Joining Device Credential (PSKd)

  zephyrproject · zephyr

  High7.5
• CVE-2026-55457

  Goobi viewer: Empty webapi.authorization.token default permits unauthenticated authorization bypass

  intranda · goobi-viewer-core

  High7.4
• CVE-2026-77933

  DB-GPT through 0.8.2 Hardcoded MySQL Root Credentials in docker-compose Deployment

  eosphoros-ai · DB-GPT

  Critical9.3
• CVE-2026-112296

  FlyCms through commit edfdf724 Default Super Administrator Credentials

  sunkaifei · FlyCms

  Critical9.3
• CVE-2026-111998

  Vanus 0.8.0 through 0.9.0 Default Admin Credentials via Gateway

  vanus-labs · vanus

  Critical9.3

Vendors it comes up for most

1. IBM5
2. Dell4
3. Hitachi3
4. 70mai2
5. Azure Access Technology2
6. CISA2
7. Delta Electronics2
8. Eclipse Foundation2
9. IOSiX2
10. Siemens2