CVE•Published 2026-06-17•0 articles on news•3 live references•NVD data

CVE-2026-54445

Vulnerability data via NVD (ingested)

CVSS v3.1

—

EPSS percentile

—

Weaknesses (CWE)

CWE-204Observable Response Discrepancy CWE-1393Use of Default Password

Description

vantage6 is an open-source infrastructure for privacy preserving analysis. Versions prior to 5.0.0 provide an initial user with username `root` and password `root`. This is not ideal because attackers know that almost all vantage6 servers have a user with username `root` that probably has admin rights, and the initial password is very weak and it is possible that administrators forget to reset it. Version 5.0.0 fixes the issue. As a workaround, it is possible to delete the `root` user after it has been used to create other users.

Timeline

Published 2026-06-17

Modified 2026-06-17

External references

NVD MITRE VulnCheck

Search for exposed instances

Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).

Shodan · vuln tag0 hosts

vuln:CVE-2026-54445

Hosts Shodan has explicitly fingerprinted as vulnerable.

More intel sources (5)

Shodan report

vuln:CVE-2026-54445

Country / ASN / product breakdown for the vuln query.

Censys

vulnerabilities.cve_id: CVE-2026-54445

Censys host search filtered to this CVE id.

grep.app

CVE-2026-54445