https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T12:57:12.709705+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-69657 fkie_cve-2026-69657 2026-09-28T12:57:12.771479+00:00

XING CPTrans-ME-X contains a Use of Default Password (CWE-1393). Anyone with the knowledge of the credential may log in to the affected device.

 https://vulnerability.circl.lu/vuln/ghsa-6wxx-c57w-qmvf GHSA-6wxx-c57w-qmvf 2026-09-28T12:57:12.771584+00:00

XING CPTrans-ME-X contains a Use of Default Password (CWE-1393). Anyone with the knowledge of the credential may log in to the affected device.

 https://vulnerability.circl.lu/vuln/jvndb-2026-000128 jvndb-2026-000128 2026-09-28T12:57:12.771620+00:00

CPTrans-ME-X provided by XING Inc. contains multiple vulnerabilities listed below.<a href='https://cwe.mitre.org/data/definitions/78.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/497.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/1393.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/259.html' target='_blank'></a><ul><li>OS Command Injection (CWE-78) - CVE-2026-62928</li><ul><li>Improper processing of the input through the administrative port may lead to OS command injection.</li></ul><li>Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497) - CVE-2026-66840</li><ul><li>Improper processing of the input through the administrative port may lead to the system information exposure.</li></ul><li>Use of Default Password (CWE-1393) - CVE-2026-69657</li><ul><li>The affected devices with the initial configuration have a default password for the Web UI.</li></ul><li>Use of Hard-coded Password (CWE-259) - CVE-2026-70403</li><ul><li>There is a password embedded in the firmware of the affected devices which allows unauthorized users to log in to the administrative port.</li></ul></ul>Katsuhiko Sato(a.k.a. goroh_kun) of 00One, Inc. reported the issues to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.