CVE-2026-19851

HighCVSS 7.7

Published: 25/08/2026(UTC)Updated: 28/08/2026(UTC)Translated: 25/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

10th percentile - higher than 10% of all known CVEs

Summary

A Use of Default Password vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to gain access to user accounts created during XML import.

Risk Assessment

An attacker could take over user accounts created during XML import, potentially leading to unauthorized data access and confidentiality breach.

Recommendation

Update Tuleap Enterprise Edition to a patched version and change default passwords on accounts created during XML import.

Other vulnerabilities in Tuleap Enterprise Edition

CVE-2026-14165High
The CVE-2026-14165 vulnerability in Tuleap Enterprise Edition allows authorization bypass through a user-controlled key. An attacker can access other users' data without proper authorization.

Original NVD description (English source)

A Use of Default Password vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to gain access to user accounts created during XML import.