Use of Default Password Vulnerability in Tuleap Enterprise Edition

CVE-2026-19851

What is CVE-2026-19851?

A Use of Default Password vulnerability exists in Tuleap Enterprise Edition versions 17.0 through 17.5, which can allow an unauthorized attacker to gain access to user accounts created during XML import. This security flaw arises when default passwords are not changed, posing significant risks to sensitive data and user privacy. Organizations utilizing affected versions are urged to implement immediate corrective actions to mitigate potential exploit risks.

References