CVE-2026-69657: Critical severity XING CPTrans-ME-X vulnerability
Published Sep 4, 2026
·Updated
XING CPTrans-ME-X contains a Use of Default Password (CWE-1393). Anyone with the knowledge of the credential may log in to the affected device.
Affected Software
1 affected component
XING CPTrans-ME-X
Event History
Sep 4, 2026
CVE Published
via MITRE·06:31 AM
Data Sourced
via MITRE·06:31 AM
DescriptionSeverity
Frequently Asked Questions
1
Who can exploit this issue?
Any remote attacker who knows the default credential can log in to an affected XING CPTrans-ME-X device. No prior authentication or user interaction is required.
2
What is the potential impact of successful exploitation?
The published severity vector rates the issue as critical, with high impact on confidentiality, integrity, and availability. Successful login could therefore give an attacker access capable of affecting all three.
3
How can I determine whether a device is affected?
Identify XING CPTrans-ME-X devices in your environment and determine whether they still accept the default credential. Devices for which the default credential remains valid should be treated as affected.