PT-2026-52988 · Undefined · Undefined

Published 2026-06-26 · Updated 2026-06-26 · CVE-2026-31928

NVD

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

The DMP-5000 devices are shipped with a default administrative web account with weak authentication controls, which are not required to be changed during initial configuration or operation. Using these accounts provides full system access.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2026-31928

Affected Products

Undefined

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-31928 · Security Note
• https://cisa.gov/news-events/ics-advisories/icsa-26-176-04 · Note
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-176-04.json · Note