PT-2026-66670 · Advantech · Ecu-1251D08.04

CVE-2026-6890 · Published 2026-07-31 · Updated 2026-07-31

Mitre

CVSS v4.0

7.1

High

Base vector

AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

A use of default credentials vulnerability in the Advantech ECU-1251D allows a remote attacker to gain unauthorised access to the device via SSH using the default root account with no password, as documented in the device manual. No prompt or guidance to change these credentials is provided during device configuration, increasing the risk of exploitation.

Fix

Related Identifiers

CVE-2026-6890

Affected Products

Ecu-1251D08.04

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-6890 · Security Note
• https://csa.gov.sg/alerts-and-advisories/alerts/al-2026-095 · Note