CRITICAL 9.3 NVD
CVE-2026-28745
Usernames and passwords, including the default credentials, are stored in the configuration file using weak encryption. If the default credentials are known by
Usernames and passwords, including the default credentials, are stored in the configuration file using weak encryption. If the default credentials are known by a malicious user, they could obtain other credentials on the system.
References
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-281-01.json
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-281-01
- https://www.hms-networks.com/
- https://www.hms-networks.com/cybersecurity
This critical severity vulnerability with a CVSS score of 9.3 was published on 2026-10-09 via NVD.
Risk Timeline
CVE Disclosed2026-10-09 · 2 days ago
Remediation Resources
Official Advisory
www.hms-networks.com/cybersecurityAnalysis & PoC
www.hms-networks.com/
vulnfeed aggregates 13827 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.