CVE-2023-53983

Critical · 9.8

CVSS

9.8

EPSS

0.6%

Published

Dec 30, 2025

CISA due date

—

The record

Anevia Flamingo XL/XS 3.6.20 contains a critical vulnerability with weak default administrative credentials that can be easily guessed. Attackers can leverage these hard-coded credentials to gain full remote system control without complex authentication mechanisms.

Affected packages

Ecosystem	Package	Introduced	Fixed