Lucene search
+L

5 matches found

CVE
CVE
added 2026/06/17 10:14 p.m.40 views

CVE-2026-54445

Vantage6 prior to 5.0.0 creates an initial admin user with username root and password root , enabling easy elevated access. The issue is addressed in version 5.0.0 . A workaround is to delete the initial root user after it has been used to create other users. Affected component: initial user prov...

6.9CVSS5.2AI score0.00292EPSS
SaveExploits0References3
OSV
OSV
added 2026/06/17 10:14 p.m.7 views

CVE-2026-54445 Vantage6: Set admin user and password from environment or configuration

vantage6 is an open-source infrastructure for privacy preserving analysis. Versions prior to 5.0.0 provide an initial user with username root and password root. This is not ideal because attackers know that almost all vantage6 servers have a user with username root that probably has admin rights,...

6.9CVSS5.9AI score0.00292EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/06/05 12:0 a.m.12 views

PT-2026-49248

Impact Vantage6 currently provides an initial user with username root and password root. This is not ideal for the following reasons: - Attackers know that almost all vantage6 servers have a user with username root that probably has admin rights - The initial password is very weak and it is...

6.9CVSS5.4AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/06/05 12:0 a.m.21 views

PT-2026-50569

Name of the Vulnerable Software and Affected Versions vantage6 versions prior to 5.0.0 Description An open-source infrastructure for privacy preserving analysis provides an initial user with the username root and password root. This configuration is insecure as attackers are aware that most serve...

6.9CVSS5.7AI score0.00292EPSS
SaveExploits0References14
CNNVD
CNNVD
added 2025/09/23 12:0 a.m.10 views

AMD Instinct MI300X accelerators 安全漏洞

AMD Instinct MI300X accelerators is a data center-grade GPU accelerator card from Ultraviolet Semiconductor AMD. A security vulnerability exists in AMD Instinct MI300X accelerators that stems from improper input validation and could allow a privileged attacker to delete local root directory files...

5CVSS6.4AI score0.002EPSS
SaveExploits0References1
Rows per page
Query Builder