CVE-2026-111693Critical· 9.8▾ MidnightDataBuff ai-apm-web through 0.1.10 contains a hard-coded default credentials vulnerability that allows unauthenticated attackers to gain administrator access using the built-in admin/Databuff@123 account. Attackers can POST these credent…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 53.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.4%
DataBuff ai-apm-web through 0.1.10 contains a hard-coded default credentials vulnerability that allows unauthenticated attackers to gain administrator access using the built-in admin/Databuff@123 account. Attackers can POST these credentials to /webapi/api/v1/auth/login to obtain an administrator token and access all protected /webapi routes.
databuff <= 0.1.10Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-111692Critical· 9.8DataBuff ai-apm-web through 0.1.10 Authentication Bypass via Hardcoded HMAC Secret
CVE-2026-111329Critical· 9.8JuggleIM im-server through 1.8.16 Default Admin Credentials in Admin Console
CVE-2026-108783High· 7.3A security vulnerability has been detected in PRVTPRO Amnezia-Web-Panel up to 1.6.2/1.7.2
CVE-2026-108263Critical· 9.9Astron Agent is an agentic workflow platform for building and running AI agents
CVE-2026-100103Critical· 10.0Perforce P4 Search container images prior to 2026.4.2 reset the service authentication token to a publicly documented default value
CVE-2026-90924Critical· 9.8Use of default credentials vulnerability in Innotim Software, Telecommunications and Consultancy Trade Ltd