CVE-2026-84295

Improper authentication in Progress Software WSFTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an unauthenticated remote attacker to access sensitive information, including administrative credentials...

EUVD-2026-113016

Improper authentication in Progress Software WSFTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an unauthenticated remote attacker to access sensitive information, including administrative credentials...

CVE-2026-84295 Improper Authentication in Progress WS_FTP Server

Improper authentication in Progress Software WSFTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an unauthenticated remote attacker to access sensitive information, including administrative credentials...

CVE-2026-84295

Progress Software WS_FTP Server on Windows is vulnerable to an improper authentication flaw in versions prior to 2024.0.6 and 2025.0.3 . This vulnerability allows an unauthenticated remote attacker to access sensitive information , specifically including administrative credentials . No specific t...

CVE-2026-84295: Progress Software WS_FTP Server: Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could…

Improper authentication in Progress Software WSFTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an unauthenticated remote attacker to access sensitive information, including administrative credentials...

PT-2026-132327

Name of the Vulnerable Software and Affected Versions Progress Software WS FTP Server versions prior to 2024.0.6 Progress Software WS FTP Server versions prior to 2025.0.3 Description Improper authentication on Windows allows an unauthenticated remote attacker to access sensitive information,...

CVE-2026-89052 Hardcoded AES encryption key in Archer C6

A hardcoded cryptographic key management vulnerability exists in Archer C6 due to the use of a universal cryptographic key shared across devices. An attacker who obtains an encrypted configuration file or other protected credential data can recover plaintext credentials. Successful exploitation...

CVE-2026-89052

The Archer C6 is vulnerable to a hardcoded cryptographic key management issue where a universal cryptographic key is shared across all devices. An attacker capable of obtaining an encrypted configuration file or other protected credential data can recover plaintext credentials . Successful exploi...

CVE-2026-89199

A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V6.0. Affected devices do not properly restrict access to sensitive configuration items via specific database queries. This could allow an authenticated attacker to retrieve administrative credentials for various internal...

CVE-2026-89199

The RUGGEDCOM CROSSBOW (all versions

EUVD-2026-98397

A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V6.0. Affected devices do not properly restrict access to sensitive configuration items via specific database queries. This could allow an authenticated attacker to retrieve administrative credentials for various internal...

CVE-2026-89199

A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V6.0. Affected devices do not properly restrict access to sensitive configuration items via specific database queries. This could allow an authenticated attacker to retrieve administrative credentials for various internal...

CVE-2026-89199: Authorization Bypass Through User-Controlled Key

A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V6.0. Affected devices do not properly restrict access to sensitive configuration items via specific database queries. This could allow an authenticated attacker to retrieve administrative credentials for various internal...

PT-2026-111396

Name of the Vulnerable Software and Affected Versions RUGGEDCOM CROSSBOW versions prior to V6.0 Description Authenticated attackers can retrieve administrative credentials for internal systems because the software does not properly restrict access to sensitive configuration items via specific...

Siemens RUGGEDCOM CROSSBOW

SUMMARY RUGGEDCOM CROSSBOW contains multiple vulnerabilities that could allow an attacker to execute arbitrary SQL commands on the underlying database, retrieve sensitive administrative credentials, escalate privileges, and perform unauthorized operations such as modifying system configurations...

Siemens RUGGEDCOM CROSSBOW authorization issue vulnerability

Siemens RUGGEDCOM CROSSBOW versions prior to V6.0 have an authorization issue vulnerability. This vulnerability stems from the failure to properly restrict access to sensitive configuration items through specific database queries. As a result, authenticated attackers may obtain administrative...

CVE-2026-105278

The published Docker image for openPDC includes a fixed administrative credential with no forced change on first use. An attacker with network access to the management interface can authenticate using this credential and gain full administrative control of the application...

CLEANSTART-2026-AY37213 Spring Security's embedded UnboundID LDAP server (UnboundIdContainer) unconditionally registers an administrative credential and binds its listener to all available network interfaces

Security vulnerability affects the apache-nifi-registry package. Spring Security's embedded UnboundID LDAP server UnboundIdContainer unconditionally registers an administrative credential and binds its listener to all available network interfaces...

CVE-2026-76488 Cisco Application Policy Infrastructure Controller Authenticated Information Disclosure Vulnerability

A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote attacker to access sensitive files on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. Th...

CVE-2026-76488 Cisco Application Policy Infrastructure Controller Authenticated Information Disclosure Vulnerability

A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote attacker to access sensitive files on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. Th...