ByteOS Network

Vulnerability Details :

CVE-2026-8672

Assigner Org ID-455daabc-a392-441d-aa46-37d35189897c

Published At-22 May, 2026 | 13:17

Updated At-22 May, 2026 | 15:04

Default credentials for internal DB

Use of default password vulnerability in syslink software AG Avantra on Linux, Windows allows Try Common or Default Usernames and Passwords. This issue affects Avantra: before 25.3.0.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:NCSC.ch

Assigner Org ID:455daabc-a392-441d-aa46-37d35189897c

Published At:22 May, 2026 | 13:17

Updated At:22 May, 2026 | 15:04

▼CVE Numbering Authority (CNA)

Default credentials for internal DB

Use of default password vulnerability in syslink software AG Avantra on Linux, Windows allows Try Common or Default Usernames and Passwords. This issue affects Avantra: before 25.3.0.

Affected Products

Vendor

syslink software AG

Product

Avantra

Platforms

Linux
Windows

Default Status

unaffected

Versions

Affected

From 0 before 25.3.0 (semver)

Problem Types

Type	CWE ID	Description
CWE	CWE-1393	CWE-1393 Use of default password

Type: CWE

CWE ID: CWE-1393

Description: CWE-1393 Use of default password

Metrics

Version	Base score	Base severity	Vector
3.1	5.1	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N

Version: 3.1

Base score: 5.1

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N

Impacts

CAPEC ID	Description
CAPEC-70	CAPEC-70 Try Common or Default Usernames and Passwords

CAPEC ID: CAPEC-70

Description: CAPEC-70 Try Common or Default Usernames and Passwords

Credits

finder

Vicxer Inc.

References

Hyperlink	Resource
https://support.avantra.com/hc/en-us/articles/5535551609759	vendor-advisory

Hyperlink: https://support.avantra.com/hc/en-us/articles/5535551609759

Resource:

vendor-advisory

▼Authorized Data Publishers (ADP)

CISA ADP Vulnrichment

Metrics Other Info

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:vulnerability@ncsc.ch

Published At:22 May, 2026 | 14:16

Updated At:02 Jun, 2026 | 14:56

Use of default password vulnerability in syslink software AG Avantra on Linux, Windows allows Try Common or Default Usernames and Passwords. This issue affects Avantra: before 25.3.0.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	5.1	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N
Primary	3.1	5.1	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N

Type: Secondary

Version: 3.1

Base score: 5.1

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N

Type: Primary

Version: 3.1

Base score: 5.1

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N

CPE Matches

avantra>>avantra>>Versions before 25.3.0(exclusive)

cpe:2.3:a:avantra:avantra:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>-

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

Microsoft Corporation

>>windows>>-

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-1393	Secondary	vulnerability@ncsc.ch

CWE ID: CWE-1393

Type: Secondary

Source: vulnerability@ncsc.ch

References

Hyperlink	Source	Resource
https://support.avantra.com/hc/en-us/articles/5535551609759	vulnerability@ncsc.ch	Vendor Advisory

Hyperlink: https://support.avantra.com/hc/en-us/articles/5535551609759

Source: vulnerability@ncsc.ch

Resource:

Vendor Advisory

Similar CVEs

2Records found

CVE-2025-14917

Matching Score-6

Assigner-IBM Corporation

View Details

Matching Score-6

Assigner-IBM Corporation

CVSS Score-6.7||MEDIUM

EPSS-0.36% / 27.78%

7 Day CHG~0.00%

Published-25 Mar, 2026 | 20:13

Updated-30 Mar, 2026 | 16:59

IBM WebSphere Application Server Liberty could provide weaker than expected security

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty could provide weaker than expected security when administering security settings.

Vendor-Apple Inc.Microsoft Corporation IBM Corporation Linux Kernel Organization, Inc

Product-windows websphere_application_server aix z\/os macos i linux_kernel WebSphere Application Server - Liberty

CWE ID-CWE-1393

Use of Default Password

CVE-2022-4126

Matching Score-6

Assigner-Asea Brown Boveri Ltd. (ABB)

View Details

Matching Score-6

Assigner-Asea Brown Boveri Ltd. (ABB)

CVSS Score-9.6||CRITICAL

EPSS-0.62% / 45.78%

7 Day CHG~0.00%

Published-27 Mar, 2023 | 04:46

Updated-19 Feb, 2025 | 16:26

Use of Default Password

Use of Default Password vulnerability in ABB RCCMD on Windows, Linux, MacOS allows Try Common or Default Usernames and Passwords.This issue affects RCCMD: before 4.40 230207.

Vendor-ABB Linux Kernel Organization, Inc Microsoft Corporation Apple Inc.

Product-rccmd windows macos linux_kernel RCCMD

CWE ID-CWE-1393

Use of Default Password

CWE ID-CWE-287

Improper Authentication

CVE-2026-8672

Credits

Default credentials for internal DB

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs