CVE-2026-75896: CWE-798 Use of Hard-coded Credentials in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk

This vulnerability (CVE-2026-75896) is classified under CWE-798, indicating the use of hard-coded credentials in the Liderahenk software by TÜBİTAK BİLGEM Software Technologies Research Institute. The flaw allows attackers to authenticate using common or default credentials embedded in the software, potentially leading to unauthorized access with high confidentiality and integrity impact. It affects versions of Liderahenk before 3.5.5. There is no vendor advisory or patch information available at this time, and no known exploits have been reported in the wild.

Successful exploitation of this vulnerability could allow an unauthenticated attacker to gain unauthorized access to the Liderahenk system, compromising confidentiality and integrity of data. The CVSS score of 9.1 reflects critical severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. Availability impact is not affected.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, organizations should consider restricting access to affected systems, changing default credentials if possible, and monitoring for unauthorized access attempts. Avoid relying solely on default or hard-coded credentials.