AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2025-26701

CRITICAL · CVSS 10 EPSS 0.44%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-03-11 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 10.0. See the original NVD description below for full technical details.

CVE
CVE-2025-26701
Severity
CRITICAL
CVSS
10
EPSS
0.44%

Original NVD Description

An issue was discovered in Percona PMM Server (OVA) before 3.0.0-1.ova. The default service account credentials can lead to SSH access, use of Sudo to root, and sensitive data exposure. This is fixed in PMM2 2.42.0-1.ova, 2.43.0-1.ova, 2.43.1-1.ova, 2.43.2-1.ova, and 2.44.0-1.ova and in PMM3 3.0.0-1.ova and later.