https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-11T03:02:25.918793+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-125384 CVE-2026-125384 — INDOTALENT WHMS before 10.20261109 Default Administrator Credentials via UserAdminSeeder 2026-11-11T03:02:25.928511+00:00

Affected: go2ismail Asp.Net-Core-Inventory-Order-Management-System

INDOTALENT WHMS before 10.20261109 contains a default credentials vulnerability that allows unauthenticated attackers to gain administrator access because UserAdminSeeder creates admin@root.com with password 123456. Attackers can log in with these credentials, which carry every admin role and no forced password change, to fully control deployments that kept them.