CVE-2026-111693: Use of Default Credentials in databufflabs databuff
Description
DataBuff ai-apm-web versions up to 0.1.10 contain a hard-coded default credentials vulnerability. This flaw allows unauthenticated attackers to gain administrator access by using the built-in admin/Databuff@123 credentials. Attackers can authenticate via a POST request to /webapi/api/v1/auth/login and obtain an administrator token, enabling access to all protected API routes.
CVSS v4.0
Score 9.3critical
Affected software
databufflabs
databuff
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-111693 identifies a critical vulnerability in DataBuff ai-apm-web (up to version 0.1.10) where default credentials (admin/Databuff@123) are hard-coded. This allows unauthenticated attackers to log in as an administrator by sending these credentials to the /webapi/api/v1/auth/login endpoint. Successful authentication grants an administrator token, providing full access to all protected /webapi routes within the application.
Potential Impact
An attacker can gain full administrative access without any prior authentication or privileges, compromising the confidentiality, integrity, and availability of the affected system. This could lead to unauthorized data access, modification, or disruption of service.
Mitigation Recommendations
No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, it is recommended to change or disable default credentials and restrict access to the affected endpoints where possible.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-10-16T14:31:20.730Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6ad264192cdf04f656199d22
Added to database: 10/16/2026, 17:51:21 UTC
Last enriched: 10/16/2026, 18:18:25 UTC
Last updated: 10/16/2026, 23:10:52 UTC
Views: 16
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.