PT-2026-52988 · Undefined · Undefined

Publicado 2026-06-26 · Atualizado 2026-06-26 · CVE-2026-31928

NVD

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

The DMP-5000 devices are shipped with a default administrative web account with weak authentication controls, which are not required to be changed during initial configuration or operation. Using these accounts provides full system access.

Correção

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2026-31928

Produtos afetados

Undefined

Referências · 3

• https://cisa.gov/news-events/ics-advisories/icsa-26-176-04 · Nota
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-176-04.json · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-31928 · Nota de Segurança