CVE-2026-41939: Use of Default Credentials in Care Everywhere LLC Care Everywhere Gateway
Care Everywhere Gateway version 14.3.10 contains a critical vulnerability due to hard-coded default credentials in its bundled WildFly 8.2.0.Final management interface. This flaw allows unauthenticated remote attackers to gain administrative access by using default credentials that are identical across all installations. Exploitation enables attackers to authenticate to the WildFly management console on port 20990 and deploy malicious Web Application Archive files, leading to remote code execution under the Windows machine account. The affected version 14.x.x was declared end-of-life in 2017, and subsequent releases have addressed this issue.
AI Analysis
Technical Summary
CVE-2026-41939 describes a hard-coded credentials vulnerability in Care Everywhere Gateway 14.3.10's embedded WildFly 8.2.0.Final management interface. The default credentials are the same across all installations, allowing unauthenticated remote attackers to access the management console on port 20990. Attackers can deploy malicious web applications via the Deployments interface, resulting in remote code execution with the privileges of the Windows machine account. The affected version is 14.3.10, which is end-of-life since 2017. Later versions have fixed this vulnerability.
Potential Impact
An attacker can gain unauthenticated administrative access to the WildFly management console, enabling deployment of malicious applications and remote code execution on the host system with Windows machine account privileges. This represents a critical security risk allowing full compromise of the affected system.
Mitigation Recommendations
No official patch or remediation level is provided for the affected version 14.3.10, which is end-of-life since 2017. Users should upgrade to a supported version of Care Everywhere Gateway where this vulnerability has been addressed. Until then, restricting network access to port 20990 and disabling or securing the WildFly management interface are recommended to reduce exposure.
CVE-2026-41939: Use of Default Credentials in Care Everywhere LLC Care Everywhere Gateway
Description
Care Everywhere Gateway version 14.3.10 contains a critical vulnerability due to hard-coded default credentials in its bundled WildFly 8.2.0.Final management interface. This flaw allows unauthenticated remote attackers to gain administrative access by using default credentials that are identical across all installations. Exploitation enables attackers to authenticate to the WildFly management console on port 20990 and deploy malicious Web Application Archive files, leading to remote code execution under the Windows machine account. The affected version 14.x.x was declared end-of-life in 2017, and subsequent releases have addressed this issue.
CVSS v4.0
Score 9.3critical
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-41939 describes a hard-coded credentials vulnerability in Care Everywhere Gateway 14.3.10's embedded WildFly 8.2.0.Final management interface. The default credentials are the same across all installations, allowing unauthenticated remote attackers to access the management console on port 20990. Attackers can deploy malicious web applications via the Deployments interface, resulting in remote code execution with the privileges of the Windows machine account. The affected version is 14.3.10, which is end-of-life since 2017. Later versions have fixed this vulnerability.
Potential Impact
An attacker can gain unauthenticated administrative access to the WildFly management console, enabling deployment of malicious applications and remote code execution on the host system with Windows machine account privileges. This represents a critical security risk allowing full compromise of the affected system.
Mitigation Recommendations
No official patch or remediation level is provided for the affected version 14.3.10, which is end-of-life since 2017. Users should upgrade to a supported version of Care Everywhere Gateway where this vulnerability has been addressed. Until then, restricting network access to port 20990 and disabling or securing the WildFly management interface are recommended to reduce exposure.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-04-22T18:50:43.621Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a6a417a9c2644c7f8dd21d5
Added to database: 07/29/2026, 18:07:54 UTC
Last enriched: 07/29/2026, 18:22:05 UTC
Last updated: 07/29/2026, 19:03:14 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.