CVE-2026-8672
Use of default password vulnerability in syslink software AG Avantra on Linux, Windows allows Try Common or Default Usernames and Passwords. This issue affects Avantra: before 25.3.0.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 5.1
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N
- EPSS probability
- 0.10%
- CWE
- CWE-1393
- Published
- 2026-05-22
- Last modified
- 2026-05-22
Affected products
- syslink software AG Avantra
Weakness type
Related vulnerabilities
- CVE-2026-69657 — XING CPTrans-ME-X contains a Use of Default Password (CWE-1393). Anyone with the knowledge of the...
- CVE-2026-82698 — sambitraj Student-Management-System aca.sql default password
- CVE-2026-19851 — Use of Default Password vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5
- CVE-2026-5269 — Navigator NCS and MCP System Accounts with Default Passwords
- CVE-2026-54445 — Vantage6: Set admin user and password from environment or configuration
- CVE-2026-35075 — Hardcoded default Password for Service Account
- CVE-2026-33784 — JSI Virtual Lightweight Collector: Default password is not required to be changed which allows unauthorized high-privileged access
- CVE-2025-14917 — IBM WebSphere Application Server Liberty could provide weaker than expected security