Common Weakness Enumeration

CWE-1393 Use of Default Password

Description

The product uses default passwords for potentially critical functionality.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-1393 ordered by modification date.

7 reviewed records

Advisory ID	NVD ID	Severity	PURLs	Summary	Last Modified
GHSA-pqxw-g93w-hj9x	-	HIGH	npm/trigger.dev	Trigger.dev Self-Hosted Deployment: Default Secrets allow Unauthenticated Infrastructure Compromise	2026-10-02
GHSA-fgmc-2hqj-86v4	CVE-2026-54445	MODERATE	pypi/vantage6	Vantage6: Set admin user and password from environment or configuration	2026-07-09
GHSA-8pxw-9c75-6w56	CVE-2025-8077	CRITICAL	golang/github.com/neuvector/neuvector	NeuVector admin account has insecure default password	2026-07-02
GHSA-hj7x-hmf2-hc2p	CVE-2026-4404	CRITICAL	golang/github.com/goharbor/harbor	Harbor allows the use of the default password for web UI login	2026-03-25
GHSA-gq3w-7jj3-x7gr	CVE-2026-2635	CRITICAL	pypi/mlflow	MLflow Use of Default Password Authentication Bypass Vulnerability	2026-03-17
GHSA-43xf-59vr-g4f2	CVE-2025-43799	MODERATE	maven/com.liferay.portal/release.portal.bom	Liferay Portal Uses Default Password	2025-09-16
GHSA-57qh-vmjr-5jxg	CVE-2024-48987	HIGH	-	Snipe-IT remote code execution	2025-03-25