CWE-1393

49 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.

Critical 27High 6Medium 14Low 2Not scored 0

CVEs per yearBy the year they were published

CVE-2023-45249
Remote command execution due to use of default passwords. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 5.0.1-61,…
Acronis · Acronis Cyber Infrastructure
ExploitedCritical9.8

CVE-2026-121022
Default Administrator Password Change Not Enforced in Axxon One Web Client
AxxonSoft · Axxon One
Critical9.2
CVE-2026-112030
diem-project diem dmDataLoad.php default password
diem-project · diem
Medium5.3
CVE-2026-16755
A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an unauthorized remote user…
Lenovo · Smart Camera C33
Medium6.0
CVE-2026-69657
XING CPTrans-ME-X contains a Use of Default Password (CWE-1393). Anyone with the knowledge of the credential may log in to the affected device.
Xing Inc. · XING CPTrans-ME-X
Critical9.3
CVE-2026-82698
sambitraj Student-Management-System aca.sql default password
sambitraj · Student-Management-System
Medium6.9
CVE-2026-19851
Use of Default Password vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5
Dassault Systèmes · Tuleap Enterprise Edition
High7.7
CVE-2026-16504
VPS.org one-click Zulip template deployment instance contains multiple vulnerabilities
VPS.org · Zulip template
Critical9.8
CVE-2026-16503
VPS.org one-click Supabase template deployment instance contains multiple vulnerabilities
VPS.org · Supabase template
Critical9.1
CVE-2026-5269
Navigator NCS and MCP System Accounts with Default Passwords
CIENA · Navigator NCS
Critical9.8
CVE-2026-54445
Vantage6: Set admin user and password from environment or configuration
vantage6 · vantage6
Medium6.9