HIGHCVSS v4 7.2Vulnerability

CVE-2026-118790

Multiple hardcoded credentials are embedded within product components and administrative functionalities. These credentials may enable unauthorized access to privileged accounts, services, or application features across affected deployments.

Properties

Severity
HIGH
Nvd fetched at
2026-11-10T23:33:48.924589+00:00
Epss score
0.00249
Cvss severity
HIGH
Cvss score
7.2
Retrieved at
2026-11-10T23:35:17+00:00
Last source
FIRST EPSS
Score
7.2
Cvss version
4.0
Cve id
CVE-2026-118790
Cvss vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
First seen by Signal
2026-11-09T15:13:27+00:00
Name
CVE-2026-118790
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Published at
2026-11-09T13:17:05.200
Last modified
2026-11-09T13:17:05.200
Epss percentile
0.16332

Related Entities (1)

HAS_WEAKNESS (1)

Related research

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-118790 (CVSS v4 7.2) — Ninja Signal Threat Intelligence | Ninja Signal