VULNERABILITY INTELLIGENCE

CVE-2026-26218

CVSS score9.8 CRITICAL
EPSS probability0.43%
CISA KEVNot currently listed
Published2026-02-12
Last modified2026-07-14
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

newbee-mall includes pre-seeded administrator accounts in its database initialization script. These accounts are provisioned with a predictable default password. Deployments that initialize or reset the database using the provided schema and fail to change the default administrative credentials may allow unauthenticated attackers to log in as an administrator and gain full administrative control of the application.

Weakness classification

  • disclosure@vulncheck.com: CWE-798

Primary references