CVE-2026-19851
A Use of Default Password vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to gain access to user accounts created during XML import.
Scoring
- Severity
- HIGH
- CVSS base score
- 7.7
- CVSS vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
- EPSS probability
- 0.20%
- CWE
- CWE-1393
- Published
- 2026-08-25
- Last modified
- 2026-08-25
Affected products
- Dassault Systèmes Tuleap Enterprise Edition
- Dassault Systèmes Tuleap Enterprise Edition
Weakness type
Related vulnerabilities
- CVE-2026-69657 — XING CPTrans-ME-X contains a Use of Default Password (CWE-1393). Anyone with the knowledge of the...
- CVE-2026-82698 — sambitraj Student-Management-System aca.sql default password
- CVE-2026-5269 — Navigator NCS and MCP System Accounts with Default Passwords
- CVE-2026-54445 — Vantage6: Set admin user and password from environment or configuration
- CVE-2026-35075 — Hardcoded default Password for Service Account
- CVE-2026-8672 — Default credentials for internal DB
- CVE-2026-33784 — JSI Virtual Lightweight Collector: Default password is not required to be changed which allows unauthorized high-privileged access
- CVE-2025-14917 — IBM WebSphere Application Server Liberty could provide weaker than expected security