CVE-2026-105278

Published 9 October 2026 · tracked since 10 October 2026

Description

The published Docker image for openPDC includes a fixed administrative credential with no forced change on first use. An attacker with network access to the management interface can authenticate using this credential and gain full administrative control of the application.

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-107804 MEDIUM 5.3
• CVE-2026-107805 HIGH 7.5
• CVE-2026-104081 HIGH 8.1
• CVE-2026-94067 HIGH 8.1
• CVE-2026-94064 HIGH 8.8
• CVE-2026-94065 HIGH 8.8
• CVE-2026-100730 CRITICAL 9.8
• CVE-2026-94062 HIGH 8.1
• CVE-2026-62028 MEDIUM 5.4
• CVE-2026-104392 HIGH 8.8

→ Open the live CVE board · all tools