CVE-2026-108783CWE-1392

CVE-2026-108783

High · published October 12, 2026

CVSS v3.1
7.3
EPSS
0%
Percentile
30.2
In the wild
Unconfirmed
What it is

A security vulnerability has been detected in PRVTPRO Amnezia-Web-Panel up to 1.6.2/1.7.2. This affects an unknown part of the file app.py of the component Backup Download. The manipulation leads to use of default credentials. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
6.9 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
EPSS
0.00375 · 30.2th percentile
Weakness
CWE-1392 · Use of Default Credentials
Published
2026-10-12T06:16Z
References (5)
https://github.com/ASantsSec/CVE/issues/27 · [email protected]https://vuldb.com/cve/CVE-2026-108783 · [email protected]https://vuldb.com/submit/959275 · [email protected]https://vuldb.com/vuln/416562 · [email protected]https://vuldb.com/vuln/416562/cti · [email protected]
EPSS history
Timeline
  • 13 OCT 03:28Z
    EPSS moved — → 0%
    epss
  • 12 OCT 00:45Z
    PRVTPRO Amnezia-Web-Panel Backup Download app.py default credentials
    cvelistv5
  • 12 OCT 00:45Z
    PRVTPRO Amnezia-Web-Panel Backup Download app.py default credentials
    cvelistv5