CVE-2026-93290

Deferred Deferred - Pending Action

Hard-Coded Credentials in Omni C20

Publication date: 2026-09-24

Last updated on: 2026-09-24

Assigner: ICS-CERT

Description

Omni C20 uses hard-coded credentials that could allow an attacker to monitor log files to obtain credentials to access information like mapping data.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-24

Last Modified

2026-09-24

Generated

2026-09-25

AI Q&A

2026-09-25

EPSS Evaluated

N/A

NVD

CVE-2026-93290

EUVD

EUVD-2026-86411

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-798	The product contains hard-coded credentials, such as a password or cryptographic key.

Attack-Flow Graph

Executive Summary

Omni C20 has hard-coded credentials that could allow an attacker to monitor log files and steal those credentials. This would let the attacker access sensitive information such as mapping data.

Impact Analysis

An attacker could gain unauthorized access to your system by exploiting the hard-coded credentials. This may lead to exposure of confidential mapping data or other sensitive information stored or processed by Omni C20.

Compliance Impact

This vulnerability could lead to unauthorized access and data breaches, violating GDPR and HIPAA requirements for data protection and confidentiality. Organizations may face legal penalties and reputational damage.

Mitigation Strategies

Change all hard-coded credentials in Omni C20 to unique, strong passwords. Restrict access to log files containing sensitive information and monitor them for unauthorized access. Ensure no default or shared credentials remain in use.

Hi! I’m here to help you understand CVE-2026-93290. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70