CVE-2026-32645
MEDIUMCVSS 6/10EPSS 0.12%
Last modified
CVE-2026-32645 is a medium-severity vulnerability rated 6/10 on the CVSS scale. Default factory credentials with administrative access are enabled and persist even after configuring other administrator accounts.. EPSS estimates a 0.12% chance of exploitation in the next 30 days.
Description
Default factory credentials with administrative access are enabled and persist even after configuring other administrator accounts.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Red Lion Controls | 700 Series | < Firmware Versions 3.11.0; < Bootloader Versions 2.0.6.1 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-32645?
Default factory credentials with administrative access are enabled and persist even after configuring other administrator accounts.
How severe is CVE-2026-32645?
CVE-2026-32645 has a CVSS score of 6/10 (MEDIUM severity). The EPSS model estimates a 0.12% probability of exploitation in the next 30 days.
How do I fix CVE-2026-32645?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-3264A vulnerability was determined in go2ismail Free-CRM up to b…8.8
- CVE-2026-32640SimpleEval is a library for adding evaluatable expressions i…9.8
- CVE-2026-32641Parseable is a log analytics platform built for high-volume …7.5
- CVE-2026-32642Incorrect Authorization (CWE-863) vulnerability in Apache Ar…4.3
- CVE-2026-32643A vulnerability exists in BIG-IP and BIG-IQ systems where a …8.7
- CVE-2026-32644Specific firmware versions of Milesight AIOT cameras use SSL…9.8
- CVE-2026-32646A specific administrative endpoint is accessible without pro…8.7
- CVE-2026-32647NGINX Open Source and NGINX Plus have a vulnerability in the…8.5
- CVE-2026-32648Anviz CX2 Lite and CX7 are vulnerable to unauthenticated acc…5.3
- CVE-2026-32649A command injection vulnerability exists in the web server o…7.3
- CVE-2026-3265A vulnerability was identified in go2ismail Free-CRM up to b…8.8
- CVE-2026-32650Anviz CrossChex Standard is vulnerable when an attacker mani…7.5
Are you affected by CVE-2026-32645?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST