CWE-1392 类弱点 112 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-1392 指软件在关键功能中使用默认凭据的漏洞。攻击者常利用公开文档或工具获取这些默认密码，从而绕过身份验证并获取系统控制权。开发者应避免使用硬编码或通用的默认凭据，在部署前强制要求用户修改初始密码，并实施强身份验证机制，确保凭据的唯一性与保密性，以消除此类安全风险。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-42941 | Danelec Marine Danelec MacGregor Voyage Data Recorder 安全漏洞 — MacGregor Voyage Data Recorder (VDR) G4e | 8.3 | High | 2026-05-29 |
| CVE-2026-7365 | IBM Operations Analytics - Log Analysis 安全漏洞 — Operations Analytics - Log Analysis | 8.4 | High | 2026-05-27 |
| CVE-2025-36221 | IBM Cloud Pak for Data System 安全漏洞 — Cloud Pak for Data System - Cyclops | 5.3 | Medium | 2026-05-26 |
| CVE-2026-44159 | Tyler Identity Local 安全漏洞 — TID-L | 9.8 | Critical | 2026-05-19 |
| CVE-2026-7428 | Google Cloud AlloyDB for PostgreSQL 安全漏洞 — AlloyDB for PostgreSQL | - | - | 2026-05-12 |
| CVE-2026-42072 | NornicDB 安全漏洞 — NornicDB | 9.8 | Critical | 2026-05-08 |
| CVE-2023-27573 | netbox-docker 安全漏洞 — netbox-docker | 9.0 | Critical | 2026-03-11 |
| CVE-2026-28713 | Acronis Cyber Protect和Acronis Cyber Protect Cloud Agent 安全漏洞 — Acronis Cyber Protect Cloud Agent | 7.8 | - | 2026-03-05 |
| CVE-2026-22886 | OpenMQ 安全漏洞 — Eclipse OpenMQ | 9.8 | Critical | 2026-03-03 |
| CVE-2026-27751 | SODOLA SL902-SWTGW124AS 安全漏洞 — SODOLA SL902-SWTGW124AS | 9.8 | Critical | 2026-02-27 |
| CVE-2026-26341 | Tattile Smart+ 安全漏洞 — Smart+ | 9.8 | - | 2026-02-24 |
| CVE-2026-26366 | eNet SMART HOME server 安全漏洞 — eNet SMART HOME server | 9.8 | Critical | 2026-02-15 |
| CVE-2025-54756 | BrightSign OS 安全漏洞 — BrightSign OS series 4 players | 8.4 | High | 2026-02-12 |
| CVE-2026-1972 | EDIMAX BR-6208AC 安全漏洞 — BR-6208AC | 5.3 | Medium | 2026-02-06 |
| CVE-2026-1803 | Ziroom ZHOME A0101 安全漏洞 — ZHOME A0101 | 8.1 | High | 2026-02-03 |
| CVE-2025-7740 | Hitachi SuprOS 安全漏洞 — SuprOS | 7.8AI | High AI | 2026-01-28 |
| CVE-2025-59108 | Dormakaba Access Manager 安全漏洞 — Access Manager 92xx-k5 | 9.8AI | Critical AI | 2026-01-26 |
| CVE-2026-22273 | Dell ECS 安全漏洞 — ObjectScale | 8.8 | High | 2026-01-23 |
| CVE-2025-58744 | Milner ImageDirector Capture 安全漏洞 — ImageDirector Capture | 6.2AI | Medium AI | 2026-01-20 |
| CVE-2022-50803 | JM-DATA ONU JF511-TV 安全漏洞 — JF511-TV | 9.8 | Critical | 2025-12-30 |
| CVE-2018-25147 | Microhard Systems IPn4G 安全漏洞 — Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway Default Credentials | 7.5 | High | 2025-12-24 |
| CVE-2021-47707 | COMMAX CVD-Axx DVR 安全漏洞 — COMMAX CVD-Axx DVR | 9.1AI | Critical AI | 2025-12-09 |
| CVE-2025-12592 | Vivotek Camera 安全漏洞 — Affected device model numbers are FD7131-VVTK,FD7131-VVTK,FD7131-VVTK,FD7141-VVTK,IP7131-VVTK,IP7133-VVTK,IP7133-VVTK,IP7133-VVTK,IP7134-VVTK,IP7135-VVTK,IP7135-VVTK,IP7135-VVTK,IP7135-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7138-VVTK,IP7142-VVTK,IP7142-VVTK,IP7151-VVTK,IP7152-VVTK,IP7153-VVTK,IP7153-VVTK,IP7154-VVTK,IP7330-VVTK,IP7330-VVTK,IP7330-VVTK,IP8131-VVTK,IP8131-VVTK,IP8131-VVTK,IP8131W-VVTK,PT7135-VVTK,PT7137-TCON,PT7137-VVTK,PT7137-VVTK,PT7137-VVTK,PT7137-VVTK,PZ7131-VVTK,PZ7131-VVTK,PZ71X1-VVTK,PZ71X1-VVTK,PZ71X2-VVTK,SD73X3-VVTK,SD73X3-VVTK,SD73X3-VVTK,TC5330-VVTK,TC5332-TCVV,TC5333-TCVV,TC5633-TCVV,TC5633-VVTK,VS7100-VVTK,VS7100-VVTK,VS7100-VVTK | 9.8AI | Critical AI | 2025-11-19 |
| CVE-2025-12218 | Azure Access Technology BLU-IC2和Azure Access Technology BLU-IC4 安全漏洞 — BLU-IC2 | 9.4 | - | 2025-10-25 |
| CVE-2025-12217 | Azure Access Technology BLU-IC2和Azure Access Technology BLU-IC4 安全漏洞 — BLU-IC2 | 9.1 | - | 2025-10-25 |
| CVE-2025-10678 | NetBird VPN 安全漏洞 — NetBird | 9.8AI | Critical AI | 2025-10-20 |
| CVE-2025-11943 | 70mai X200 安全漏洞 — X200 | 7.3 | High | 2025-10-19 |
| CVE-2025-34516 | Ilevia EVE X1 Server 安全漏洞 — EVE X1 Server | 9.8AI | Critical AI | 2025-10-16 |
| CVE-2025-10542 | iMonitor EAM 安全漏洞 — iMonitor EAM | 8.8AI | High AI | 2025-09-25 |
| CVE-2025-35042 | Airship AI Acropolis 安全漏洞 — Acropolis | 9.8 | Critical | 2025-09-22 |
CWE-1392 是常见的弱点类别，本平台收录该类弱点关联的 112 条 CVE 漏洞。