CWE-1393Base1 in KEV

Use of Default Password

Incomplete in the CWE catalog · 42 CVEs mapped

42
CVEs mapped
1
In KEV
9.1
Median CVSS
What it is

The product uses default passwords for potentially critical functionality.

Recent examples
6.3cvss
CVE-2026-112030

diem-project diem dmDataLoad.php default password

A vulnerability was found in diem-project diem up to 5.1.3. This vulnerability affects unknown code of the file dmCorePlugin/lib/data/dmDataLoad.php. Performing a manipulation results in use of default password. The attack is possible to be carried out remotely. The exploit has been made public and could be used. It is suggested to update the configuration settings. The project was informed of the problem early through an issue report but has not responded yet.

MEDIUMno explanation yet
0%
epss
5.3cvss
CVE-2026-16755

CVE-2026-16755 - MEDIUM Severity Vulnerability

A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an unauthorized remote user to disclose sensitive information.

MEDIUMno explanation yet
0%
epss
9.8cvss
CVE-2026-69657

CVE-2026-69657 - CRITICAL Severity Vulnerability

XING CPTrans-ME-X contains a Use of Default Password (CWE-1393). Anyone with the knowledge of the credential may log in to the affected device.

CRITICALno explanation yet
1%
epss
The record
Technical detail
CWE ID
CWE-1393
Abstraction
Base
Structure
Simple
Status
Incomplete
References (4)