BaselineWatch
Desk

CVE-2026-28745

9.3 critical SSVC exploitation: none Awaiting Analysis

Usernames and passwords, including the default credentials, are stored in the configuration file using weak encryption. If the default credentials are known by a malicious user, they could obtain other credentials on the system.

Fix

Vendor advisories in the News 1

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

In the news 1

Change history 1

  1. First seenCVSS 9.3NVD modified 2026-10-11 17:17

Affected (CPE criteria) 0

NVD has not attached CPE configurations yet.

References 4