Threats tagged 'ghsa-9vpc-28gc-f73j'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.3	CVE-2026-124004XWEB EVO before 5.6.2 contains a hardcoded backdoor password vulnerability that allows unauthenticated remote Critical9.32026-11-12GCVE DatabaseCVE-2026-124004 XWEB EVO versions prior to 5.6.2 contain a critical vulnerability due to a hardcoded backdoor password. This flaw allows unauthenticated remote attackers to gain full administrative access by authenticating with a hardcoded credential. The product line reached its end of service in March 2026. Report on CVE-2026-124004 Vulnerability CWE-798 #ghsa-9vpc-28gc-f73j	GCVE Database	2026-11-12

Page 1 of 1