CVE Intelligence
Home / CVEs

CVE Database

Published vulnerabilities with severity, known exploitation and official sources.

Severity
Clear

2 result(s)

Export this search: RSS · CSV · STIX
CVE-2026-84398 High · 7.5 CWE-258 Sep 18, 2026
CareCam CM2507 Empty Password in Configuration File
CM2507 IP cameras accept an empty password for a privileged account exposed through its ONVIF management service. An attacker with network access to the affected device could access privileged management functions and obtain device, user, media-profile, and stream configuration information.
CVE-2025-15679 High · 7.3 CWE-258 Sep 11, 2026
BMC root account active without password on BullSequana XH3406 and XH3515
Under certain circumstances such as reset to factory default operation, the BMC root account is made active without a password on BullSequana XH3406 and XH3515.