Threats Tagged 'cwe-1392'

CVE-2026-76155 is a critical vulnerability in Datiphy Inc.'s Data Management Center version 8.3.0 that involves the use of default administrator credentials. This flaw allows a remote attacker to gain administrative access to the management platform without authentication. The vulnerability has a high CVSS 4.0 score of 9.3, indicating severe impact. There is no official patch or remediation guidance currently available from the vendor. The affected version explicitly stated is 8.3.0. No known exploits in the wild have been reported.

A vulnerability in ANDRITZ HIPASE-250 engineering workstations involves a provisioning script that sets a fixed, hard-coded x11vnc password. This password is identical across all workstations provisioned with this script. An attacker with adjacent-network access who knows this password can gain unauthorized VNC access to affected workstations.

CVE-2026-68503 is a critical vulnerability in the LazyOwn RedTeam/APT Framework prior to version 0.2.154. The software shipped with default C2 credentials ('LazyOwn'/'LazyOwn') hardcoded in configuration files and used without change for HTTP Basic authentication. This allows any attacker with network access who knows these default credentials to gain operator-level access to the C2 dashboard. The issue is fixed in version 0.2.154.