CVE-2026-70403
CriticalCVSS 9.8Summary
XING CPTrans-ME-X contains a Use of Hard-coded Password (CWE-259). Anyone with the knowledge of the credential may log in to the affected device.
Risk Assessment
Risk of unauthorized access to the device, potentially leading to confidentiality and integrity breaches and disruption of system operations.
Recommendation
Change hard-coded/default passwords to unique, strong passwords and implement credential management policies.
Other vulnerabilities in XING CPTrans-ME-X
See all- CVE-2026-66840High
XING CPTrans-ME-X contains an Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497). Sensitive system information may be leaked.
- CVE-2026-69657Critical
XING CPTrans-ME-X contains a Use of Default Password (CWE-1393). Anyone with the knowledge of the credential may log in to the affected device.
- CVE-2026-62928Critical
XING CPTrans-ME-X contains an OS Command Injection (CWE-78). Unauthenticated OS command may be injected.
Original NVD description (English source)
XING CPTrans-ME-X contains a Use of Hard-coded Password (CWE-259). Anyone with the knowledge of the credential may log in to the affected device.