CWE-1392
139 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 139Published CVEs138 of them scored
- 69Last 12 monthspublished in the last year
- 57Critical47 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-111257
Apache TomEE: Well-known administrative credentials created at startup
Apache Software Foundation · Apache TomEE
Not scored - CVE-2026-125384
INDOTALENT WHMS before 10.20261109 Default Administrator Credentials via UserAdminSeeder
go2ismail · Asp.Net-Core-Inventory-Order-Management-System
Critical9.3 - CVE-2026-118792
Default ODBC credentials
CompuGroup Medical · Wingesfar
Medium6.1 - CVE-2026-123553
OpenAM before 16.1.4 Default Credentials in Built-in Accounts Allow Unauthenticated Login
OpenIdentityPlatform · OpenAM
Medium6.9 - CVE-2026-123998
Hisense VIDAA Smart TV MQTT Broker Authentication Bypass
Hisense · VIDAA
High7.2 - CVE-2026-94459
IRISPowerscan Default accounts with predictable credentials
I.R.I.S S.A. · IRISPowerscan
High7.2 - CVE-2026-112354
Etrel INCH AC Charging Station Hard-coded Default Credentials
Etrel d.o.o. · Etrel INCH
Critical9.3 - CVE-2026-22105
Use of default password based on serial number
Delta Electronics · Delta UFC500
High8.7 - CVE-2026-22109
Default WebUI passwords stored in plaintext
Delta Electronics · Delta UFC500
High8.4 - CVE-2026-77056
Use of Default Credentials in boneIO
boneIO · black_debian_images
High7.1