Environment Configuration Vulnerability in Inventory Management Component by CISAgov

CVE-2026-90456

What is CVE-2026-90456?

A security vulnerability exists in the inventory management component where an example configuration file is shipped with a publicly-known administrative password. If this example file is mistakenly copied into the active configuration without executing the setup procedure to regenerate the credentials, the administrative interface becomes vulnerable to unauthorized access. This issue emphasizes the importance of secure configuration practices to prevent exposure of sensitive administrative access.

References