SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityAnalyzed

CVE-2026-8672

Use of default password vulnerability in syslink software AG Avantra on Linux, Windows allows Try Common or Default Usernames and Passwords.

MEDIUM 5.1EPSS 0.10%

Does this matter?

Lower severity and a low EPSS score (0.10%). Track it; it rarely justifies an emergency change on its own.

Description

Use of default password vulnerability in syslink software AG Avantra on Linux, Windows allows Try Common or Default Usernames and Passwords. This issue affects Avantra: before 25.3.0.

CVSS 3.1
5.1 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N
EPSS
0.10% probability · 1th percentile
CISA KEV
Not listed
Weakness
CWE-1393
Affected
avantra/avantra
Source
vulnerability@ncsc.ch

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.