CVE-2026-111329

The JuggleIM im-server (versions through 1.8.16 ) contains a critical vulnerability where it ships with default administrator credentials (admin/123456). This allows unauthenticated remote attackers to access the admin console on port 8090 . Once authenticated, attackers can control tenant applic...

CVE-2026-111329 JuggleIM im-server through 1.8.16 Default Admin Credentials in Admin Console

JuggleIM im-server through 1.8.16 ships default administrator credentials admin/123456 that allow unauthenticated remote attackers to access the admin console on port 8090. Attackers can log in as administrator, even after account deletion since CheckLogin recreates it, to control tenant...

CVE-2026-111329 JuggleIM im-server through 1.8.16 Default Admin Credentials in Admin Console

JuggleIM im-server through 1.8.16 ships default administrator credentials admin/123456 that allow unauthenticated remote attackers to access the admin console on port 8090. Attackers can log in as administrator, even after account deletion since CheckLogin recreates it, to control tenant...

CVE-2026-111329

JuggleIM im-server through 1.8.16 ships default administrator credentials admin/123456 that allow unauthenticated remote attackers to access the admin console on port 8090. Attackers can log in as administrator, even after account deletion since CheckLogin recreates it, to control tenant...

CVE-2026-105033

The EnergizeLab AI Station RK3562 firmware image ships with default root credentials and SSH enabled. An attacker with network access to the device can log in as root and take full control of it...

CVE-2026-105033 EnergizeLab AI Station Default Root Credentials with SSH Enabled

The EnergizeLab AI Station RK3562 firmware image ships with default root credentials and SSH enabled. An attacker with network access to the device can log in as root and take full control of it...

EUVD-2026-102429

The EnergizeLab AI Station RK3562 firmware image ships with default root credentials and SSH enabled. An attacker with network access to the device can log in as root and take full control of it...

CVE-2026-105033 EnergizeLab AI Station Default Root Credentials with SSH Enabled

The EnergizeLab AI Station RK3562 firmware image ships with default root credentials and SSH enabled. An attacker with network access to the device can log in as root and take full control of it...

PT-2026-115283

JuggleIM im-server through 1.8.16 ships default administrator credentials admin/123456 that allow unauthenticated remote attackers to access the admin console on port 8090. Attackers can log in as administrator, even after account deletion since CheckLogin recreates it, to control tenant...

CVE-2026-111329: Use of Default Credentials

JuggleIM im-server through 1.8.16 ships default administrator credentials admin/123456 that allow unauthenticated remote attackers to access the admin console on port 8090. Attackers can log in as administrator, even after account deletion since CheckLogin recreates it, to control tenant...

JuggleIM Trust Management Vulnerability

JuggleIM versions 1.8.16 and earlier have a vulnerability related to trust management. This vulnerability stems from the default administrator credentials “admin/123456” included in the system. Unauthenticated remote attackers can access the management console via port 8090 and log in as an...

CVE-2026-65198 Huawei Default SNMPv3 USM key

Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy. An attacker who holds the key recoverable from the open-source build can authenticate SNMPv3 to, and decrypt SNMPv3 traffic from, any unit that still carries the shipped key. The build...

Apache Solr 10.0.0 Default Credentials

Apache Solr versions 9.4.0 through 9.10.1 and 10.0.0 contain hardcoded Basic Authentication credentials that can permit administrative access. This proof of concept attempts known default credentials and retrieves a protected Solr document. https://packetstorm.news/download/235375...

CVE-2026-108783

A security vulnerability has been detected in PRVTPRO Amnezia-Web-Panel up to 1.6.2/1.7.2. This affects an unknown part of the file app.py of the component Backup Download. The manipulation leads to use of default credentials. The attack can be initiated remotely. The exploit has been disclosed...

CVE-2026-108783 PRVTPRO Amnezia-Web-Panel Backup Download app.py default credentials

A security vulnerability has been detected in PRVTPRO Amnezia-Web-Panel up to 1.6.2/1.7.2. This affects an unknown part of the file app.py of the component Backup Download. The manipulation leads to use of default credentials. The attack can be initiated remotely. The exploit has been disclosed...

CVE-2026-108783

A security vulnerability exists in PRVTPRO Amnezia-Web-Panel versions up to 1.6.2/1.7.2 . The flaw is located within the Backup Download component, specifically affecting an unspecified part of the app.py file. This issue allows for the use of default credentials , which can be exploited via a re...

EUVD-2026-97137

A security vulnerability has been detected in PRVTPRO Amnezia-Web-Panel up to 1.6.2/1.7.2. This affects an unknown part of the file app.py of the component Backup Download. The manipulation leads to use of default credentials. The attack can be initiated remotely. The exploit has been disclosed...

CVE-2026-108783

A security vulnerability has been detected in PRVTPRO Amnezia-Web-Panel up to 1.6.2/1.7.2. This affects an unknown part of the file app.py of the component Backup Download. The manipulation leads to use of default credentials. The attack can be initiated remotely. The exploit has been disclosed...

CVE-2026-108783 PRVTPRO Amnezia-Web-Panel Backup Download app.py default credentials

A security vulnerability has been detected in PRVTPRO Amnezia-Web-Panel up to 1.6.2/1.7.2. This affects an unknown part of the file app.py of the component Backup Download. The manipulation leads to use of default credentials. The attack can be initiated remotely. The exploit has been disclosed...

PT-2026-110410

Name of the Vulnerable Software and Affected Versions PRVTPRO Amnezia-Web-Panel versions prior to 1.6.3 PRVTPRO Amnezia-Web-Panel versions prior to 1.7.3 Description A remote attack is possible in the Backup Download component within the app.py file. This issue allows the use of default credentia...