CWE-258
CVEs classified under CWE-258, newest first.
3 CVEsRSS
CVE-2026-113736Critical· 9.8D-Link DHP-W610AV HNAP Login defaultvalue.xml login_prepare_hnap empty password
A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03. The impacted element is the function login_prepare_hnap of the file etc/defnodes/defaultvalue.xml of the component HNAP Login. The manipulation of the argument Password leads…
▾ MidnightD-Link · DHP-W610AVEPSS 0.92%via CVEORG
CVE-2026-84398High· 7.5CM2507 IP cameras accept an empty password for a privileged account exposed through its ONVIF management service
CM2507 IP cameras accept an empty password for a privileged account exposed through its ONVIF management service. An attacker with network access to the affected device could access privileged management functions and obtain device, user…
▾ TwilightCareCam · HMT.CM2507 FirmwareEPSS 0.41%via NVD
CVE-2025-15679High· 7.3Under certain circumstances such as reset to factory default operation, the BMC root account is made active without a password on BullSequana XH3406 and XH3515.
Under certain circumstances such as reset to factory default operation, the BMC root account is made active without a password on BullSequana XH3406 and XH3515.
▾ TwilightBull · BullSequana XH3406EPSS 0.16%via NVD