smb: client: Don't log plaintext credentials in cifs_set_cifscreds

...

CVE-2026-23303

The CVE-2026-23303 vulnerability affects the Linux kernel SMB client: when logging is enabled, cifs_set_cifscreds can emit plaintext credentials (username/password) to logs. The issue is fixed by removing the debug log, preventing credential exposure. The connected advisories confirm the flaw exi...

CVE-2026-23303

In the Linux kernel, the following vulnerability has been resolved: smb: client: Don't log plaintext credentials in cifssetcifscreds When debug logging is enabled, cifssetcifscreds logs the key payload and exposes the plaintext username and password. Remove the debug log to avoid exposing...

iFlightDoc Pre-installed Credentials Unauthorized Access

The vulnerability of the iFlightDoc onboard documentation system is related to the use of pre-set credentials. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

BUFFALO VR-S1000 Pre-installed Credentials Access

The vulnerability of the BUFFALO VR-S1000 router’s microprogramming software is related to the use of pre-set login credentials. Exploiting this vulnerability could allow a hacker to gain access to the password of any user...

SCADA Data Gateway Unauthorized Access

The vulnerability of the SCADA system SCADA Data Gateway SDG is related to the use of pre-set credentials. Exploiting this vulnerability can allow an intruder, operating remotely, to gain unauthorized access to protected information...

June 23, 2022—KB5014665 (OS Build 20348.803) Preview

None None...

NETGEAR Wi-Fi Router Pre-set Credentials Unauthorized Access

The vulnerability of NETGEAR Wi-Fi router software, including models RBK352, RBR350, and RBS350, stems from the use of pre-set login credentials. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information from a remote location...

EKOM-3000 Pre-set Account Access

The vulnerability of the ECOM-3000 data collection and transmission device is related to the use of pre-set credentials. Exploiting this vulnerability could allow a remote attacker to gain access to the device...

PT-2019-2507

Name of the Vulnerable Software and Affected Versions БАРС.Web-Своды affected versions not specified Description The issue is related to the use of pre-set credentials in the БАРС.Web-Своды platform. Exploitation of this issue could allow a remote attacker to gain access to protected information...

PT-2019-2504

Name of the Vulnerable Software and Affected Versions БАРС.ЖКХ-Жилищный Фонд affected versions not specified Description The issue is related to the use of pre-set credentials in the БАРС.ЖКХ-Жилищный Фонд platform. Exploitation of this issue may allow a remote attacker to gain access to protecte...

Korenix Switches Pre-installed Account Access

The vulnerability of Microprogrammed Software for Korenix switches relates to the use of pre-set credentials. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the device...

Korenix Switches Pre-installed Account Access

The vulnerability of Microprogrammed Software for Korenix switches relates to the use of pre-set credentials. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the device...

ALEOS Wireless Modem Pre-installed Credentials Access

The vulnerability of the ALEOS software for the Sierra Wireless AirLink GX 440 wireless modem lies in the use of pre-set login credentials. Exploiting this vulnerability allows a malicious actor to gain access to the system with privileges of one of the users: admin, rauser, sconsole, or user, by...