CWE-258
14 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 14Published CVEs14 of them scored
- 4Last 12 monthspublished in the last year
- 5Critical6 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-126812
blueprintUE Self-Hosted Edition before 4.3.7 Empty MariaDB Root Password via Docker Compose
blueprintue · blueprintue-self-hosted-edition
Critical9.3 - CVE-2026-113736
D-Link DHP-W610AV HNAP Login defaultvalue.xml login_prepare_hnap empty password
D-Link · DHP-W610AV
Critical9.3 - CVE-2026-84398
CareCam CM2507 Empty Password in Configuration File
CareCam · HMT.CM2507 Firmware
High8.7 - CVE-2025-15679
BMC root account active without password on BullSequana XH3406 and XH3515
Bull · BullSequana XH3406
High7.3 - CVE-2025-9276
Cockroach Labs cockroach-k8s-request-cert Empty Root Password Authentication Bypass Vulnerability
Cockroach Labs · cockroach-k8s-request-cert
Critical9.8 - CVE-2025-4395
Medtronic MyCareLink Patient Monitor Empty Password Vulnerability
Medtronic · MyCareLink Patient Monitor 24950
Medium6.8 - CVE-2024-35137
IBM Security Access Manager Docker information disclosure
IBM · Security Verify Access Docker
Medium6.2 - CVE-2024-4106
A vulnerability has been found in FAST/TOOLS and CI Server. The affected products have built-in accounts with no passwords set. Therefore, if the product is…
Yokogawa Electric Corporation · FAST/TOOLS
Medium5.3 - CVE-2024-28744
The password is empty in the initial configuration of ACERA 9010-08 firmware v02.04 and earlier, and ACERA 9010-24 firmware v02.04 and earlier. An…
FURUNO SYSTEMS Co.,Ltd. · ACERA 9010-08
High8.8 - CVE-2023-43016
IBM Security Access Manager Container unauthorized access
IBM · Security Verify Access Appliance
High7.3