CVE-2026-9844CWE-1392

Vulnerability in navify® Digital Pathology

High · published June 2, 2026

CVSS v4.0
8.8
EPSS
0%
Percentile
33.7
In the wild
Unconfirmed
What it is

Use of default credentials vulnerability in Roche Diagnostics navify Digital Pathology (RabbitMQ Management interface modules) allows Default Usernames and Passwords. This issue affects navify Digital Pathology: from 2.0.0 before 2.4.1.

The record
Technical detail
CVSS v4.0
8.8 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:L/SI:L/SA:L/S:N/AU:Y/R:U/V:D/RE:M/U:Green
EPSS
0.00406 · 33.7th percentile
Weakness
CWE-1392 · Use of Default Credentials
Published
2026-06-02T13:23Z
EPSS history
Timeline
  • 02 JUN 13:23Z
    Vulnerability in navify® Digital Pathology
    cvelistv5