Search vulnerabilities

Results 4

Export CSV
CVE-2026-70403

Hard‑coded Password Vulnerability in XING CPTrans‑ME‑X Allows Unrestricted Device Access

XING CPTrans-ME-X contains a Use of Hard-coded Password (CWE-259). Anyone with the knowledge of the credential may log in to the affected device.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
CVE-2026-69657

Use of Default Password Enables Unauthorized Access to XING CPTrans‑ME‑X

XING CPTrans-ME-X contains a Use of Default Password (CWE-1393). Anyone with the knowledge of the credential may log in to the affected device.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
CVE-2026-66840

Sensitive System Information Leakage in XING CPTrans-ME-X

XING CPTrans-ME-X contains an Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497). Sensitive system information may be leaked.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
CVE-2026-62928

XING CPTrans-ME-X contains an OS Command Injection (CWE-78). Unauthenticated OS command may be injected.

CVSS 4.0 · 9.3 Critical EPSS 2.0% KEV · Not listed
Vendors