Withdrawn: this CVE is not a vulnerability
The assigning CNA withdrew CVE-2026-6890 on 16 October 2026, and it carries the Rejected state at CVE.org and NVD. It must not be treated as a live finding. Its pre-withdrawal severity, score and exploitability are withheld below; the record itself is kept because withdrawals are reversible and because the reject reason is the correction worth publishing.
CVE-2026-6890
Use of default credentials vulnerability
Description
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
INFO
Published Date :
July 31, 2026, 3:16 a.m.
Last Modified :
Oct. 16, 2026, 3:10 p.m.
Remotely Exploit :
—
Source :
5f57b9bf-260d-4433-bf07-b6a79e9bb7d4
Affected Products
The following products are affected by CVE-2026-6890
vulnerability.
Even if cvefeed.io is aware of the exact versions of the
products
that
are
affected, the information is not represented in the table below.
No affected product recoded yet
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 4.0 | HIGH | 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4 | ||||
| CVSS 4.0 | HIGH | 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4 |
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-6890 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-6890 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Translated by [email protected]
Oct. 16, 2026
Action Type Old Value New Value Changed Translation Title: rechazado, Description: Motivo del rechazo: Este ID de CVE ha sido rechazado o retirado por su Autoridad de Numeración de CVE (CNA). Title: rechazado, Description: Motivo del rechazo: Este ID de CVE ha sido rechazado o retirado por su Autoridad de Numeración de CVE (CNA). -
CVE Translated by [email protected]
Oct. 15, 2026
Action Type Old Value New Value Added Translation Title: rechazado, Description: Motivo del rechazo: Este ID de CVE ha sido rechazado o retirado por su Autoridad de Numeración de CVE (CNA). -
CVE Rejected by 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4
Jul. 31, 2026
Action Type Old Value New Value -
CVE Modified by 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4
Jul. 31, 2026
Action Type Old Value New Value Changed Description A use of default credentials vulnerability in the Advantech ECU-1251D allows a remote attacker to gain unauthorised access to the device via SSH using the default root account with no password, as documented in the device manual. No prompt or guidance to change these credentials is provided during device configuration, increasing the risk of exploitation. Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Removed CVSS V4.0 CSA: AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Removed Reference CSA: https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-095/ Removed Affected [{'vendor': 'Advantech', 'product': 'ECU-1251D08.04', 'versions': [{'status': 'affected', 'version': '08.04'}], 'defaultStatus': 'unaffected'}] -
New CVE Received by 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4
Jul. 31, 2026
Action Type Old Value New Value Added Affected [{'vendor': 'Advantech', 'product': 'ECU-1251D08.04', 'versions': [{'status': 'affected', 'version': '08.04'}], 'defaultStatus': 'unaffected'}] Added Description A use of default credentials vulnerability in the Advantech ECU-1251D allows a remote attacker to gain unauthorised access to the device via SSH using the default root account with no password, as documented in the device manual. No prompt or guidance to change these credentials is provided during device configuration, increasing the risk of exploitation. Added CVSS V4.0 AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Added Reference https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-095/