CVE-2026-75896
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
Use of Hard-coded Credentials vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows Try Common or Default Usernames and Passwords. This issue affects Liderahenk before 3.5.5.
Risk Assessment
An attacker can gain unauthorized access to the system using default credentials, potentially leading to system takeover and data breach.
Recommendation
Upgrade Liderahenk to version 3.5.5 or later, which includes the fix. Change all default passwords and usernames.
Other vulnerabilities in Liderahenk
See all- CVE-2026-19271High
Liderahenk from version 3.4.0 before 3.5.5 has an LDAP Injection vulnerability. Improper neutralization of special elements in an LDAP query allows manipulation of queries.
- CVE-2026-6508Critical
The CVE-2026-6508 vulnerability in Liderahenk software has an origin validation error that allows access to functionality not properly constrained by access control lists (ACLs). This issue affects Liderahenk from version 2.0.1 before 2.0.2.
Original NVD description (English source)
Use of Hard-coded Credentials vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows Try Common or Default Usernames and Passwords. This issue affects Liderahenk: before 3.5.5.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS