Export limit exceeded: 417657 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (4 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-22114 1 Delta Electronics 1 Delta Ufc500 2026-10-30 N/A
HTTP basic auth enforces no retry limit or backoff. Combined with the default service password, the keyspace is exhaustible.
CVE-2026-22109 1 Delta Electronics 1 Delta Ufc500 2026-10-30 N/A
The shipped WebUI template database retains the factory default passwords for all five account types in cleartext. Defaults are identical across devices and were unchanged on the tested unit.
CVE-2026-22105 1 Delta Electronics 1 Delta Ufc500 2026-10-30 N/A
Delta UFC500 charging stations derive the default credentials of the Service account from character positions of the device serial number. An unauthenticated attacker with adjacent network access can reconstruct the resulting password, or exhaust the keyspace, and log in to read and change sensitive settings such as the OCPP backend.
CVE-2026-22110 1 Delta Electronics 1 Delta Ufc500 2026-10-30 N/A
The web server does not check authentication on POST or PUT. An unauthenticated attacker can reboot the charger; by brute-forcing the configid, they can also set the service password and then change any setting.