PT-2026-90525
CVE-2026-90456
·
Published
2026-09-11
·
Updated
2026-10-02
Description by
CVSS 4.0
9.2
CriticalMetricsAV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
Inventory Management Component (affected versions not specified)
Description
An example environment-configuration file for a bundled inventory-management component contains a fixed, publicly-known administrative password. If this example file is copied into the active configuration without executing the setup routine designed to regenerate credentials, the administrative interface becomes accessible to anyone who knows the default password.
Recommendations
Run the setup routine to regenerate credentials for the Inventory Management Component.
Found an issue in the description? Have something to add? Feel free to write us 👾