CVE-2026-24449
Medium · 4.6CVSS
4.6
EPSS
0.2%
Published
Feb 3, 2026
CISA due date
—
The record
For WRC-X1500GS-B and WRC-X1500GSA-B, the initial passwords can be calculated easily from the system information.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-79679 Use of Weak Credentials vulnerability in B&R Industrial Automation GmbH mapp Audit used… CWE-1391
- CVE-2026-66409 DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords for their Wi-Fi… CWE-1391
- CVE-2026-66408 The root accounts of DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak… CWE-1391
- CVE-2026-57473 A vulnerability exists in the netclient and factory services of Reolink Home Hub… CWE-1391
- CVE-2026-47325 ProjectsAndPrograms school-management-system uses predictable credentials by generating… CWE-1391
- CVE-2026-4377 Dlink DWR-X1820 router uses weak default password generated from its IMEI number and does… CWE-1391
- CVE-2026-35089 In Slican telephone exchanges secure key is generated in a predictable manner using… CWE-1391
- CVE-2026-45363 ruby-jwt: Empty-key HMAC bypass; cross-language sibling of CVE-2026-44351 CWE-1391