CVE-2025-26701

An issue was discovered in Percona PMM Server (OVA) before 3.0.0-1.ova. The default service account credentials can lead to SSH access, use of Sudo to root, and sensitive data exposure. This is fixed in PMM2 2.42.0-1.ova, 2.43.0-1.ova, 2.43.1-1.ova, 2.43.2-1.ova, and 2.44.0-1.ova and in PMM3 3.0.0-1.ova and later.

• CWE-1393

• https://www.percona.com/blog/security-advisory-cve-affecting-percona-monitoring-and-management-pmm/

Published

Mar 11, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-26696Certain crafted MIME email messages that claimed to contain …7
• CVE-2025-26697Uncontrolled resource consumption in the Linux kernel-mode d…4.8
• CVE-2025-26698Incorrect resource transfer between spheres issue exists in …2.7
• CVE-2025-26699An issue was discovered in Django 5.1 before 5.1.7, 5.0 befo…7.5
• CVE-2025-2670IBM OpenPages 9.0 is vulnerable to information disclosure of…4.3
• CVE-2025-26700Authentication bypass using an alternate path or channel iss…5.2
• CVE-2025-26702Improper Input Validation vulnerability in ZTE GoldenDB allo…7.5
• CVE-2025-26703Improper Privilege Management vulnerability in ZTE GoldenDB …4.3
• CVE-2025-26704Improper Privilege Management vulnerability in ZTE GoldenDB …4.3
• CVE-2025-26705Improper Privilege Management vulnerability in ZTE GoldenDB …7.5
• CVE-2025-26706Improper Privilege Management vulnerability in ZTE GoldenDB …5.3
• CVE-2025-26707Improper Privilege Management vulnerability in ZTE GoldenDB …5.3