CVE-2026-105278
CRITICAL
CVSS 9.8
Published: 2026-10-09
Modified: 2026-10-09
Tenable Plugin
Checking the public Tenable catalog…
Threat Intelligence Pending
IOCs, MITRE ATT&CK techniques, and attack chain data are being generated. Refresh in a few seconds.
Description
The published Docker image for openPDC includes a fixed administrative credential with no forced change on first use. An attacker with network access to the management interface can authenticate using this credential and gain full administrative control of the application.
Quick Facts
| CVE ID | CVE-2026-105278 |
| CVSS Score | 9.8 |
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| Published | 2026-10-09 |
| Exploited | No |
| CISA KEV | No |
| PoC | Not public |