CVE-2026-41939

Care Everywhere Gateway 14.3.10 contains a hard-coded credentials vulnerability in the bundled WildFly 8.2.0.Final management interface that allows unauthenticated remote attackers to gain administrative access by using default credentials identical across all installations. Attackers can authenticate to the exposed WildFly management console on port 20990 and deploy a malicious Web Application Archive file through the Deployments interface to achieve remote code execution as the Windows machine account. Version 14.x.x was declared end-of-life (EOL) in 2017 and future releases have addressed the vulnerable finding.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://gist.github.com/VAMorales/95874f23e27e17362b87133013834c0a
https://www.intuvie.com/products-overview
https://www.vulncheck.com/advisories/care-everywhere-gateway-hard-coded-credentials-rce-via-wildfly
https://gist.github.com/VAMorales/95874f23e27e17362b87133013834c0a

Configurations

No configuration.

History

24 Oct 2026, 13:10

Type	Values Removed	Values Added
Summary		(es) Care Everywhere Gateway 14.3.10 contiene una vulnerabilidad de credenciales codificadas de forma rígida en la interfaz de gestión de WildFly 8.2.0.Final incluida que permite a atacantes remotos no autenticados obtener acceso administrativo mediante el uso de credenciales predeterminadas idénticas en todas las instalaciones. Los atacantes pueden autenticarse en la consola de gestión de WildFly expuesta en el puerto 20990 y desplegar un archivo de aplicación web malicioso a través de la interfaz de Despliegues para lograr la ejecución remota de código como la cuenta de máquina de Windows. La versión 14.x.x fue declarada fin de vida útil (EOL) en 2017 y las futuras versiones han abordado el hallazgo vulnerable.

Information

Published : 2026-07-29 18:16

Updated : 2026-10-24 13:10

NVD link : CVE-2026-41939

Mitre link : CVE-2026-41939

CVE.ORG link : CVE-2026-41939

JSON object : View

Products Affected

No product.

CWE

CWE-1392

Use of Default Credentials

{"id": "CVE-2026-41939", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-41939", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-07-30T13:57:26.443758Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}], "cvssMetricV40": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 9.3, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "disclosure@vulncheck.com", "affectedData": [{"vendor": "Care Everywhere LLC", "product": "Care Everywhere Gateway", "versions": [{"status": "affected", "version": "14.3.10", "versionType": "semver"}], "defaultStatus": "affected"}]}], "published": "2026-07-29T18:16:53.477", "references": [{"url": "https://gist.github.com/VAMorales/95874f23e27e17362b87133013834c0a", "source": "disclosure@vulncheck.com"}, {"url": "https://www.intuvie.com/products-overview", "source": "disclosure@vulncheck.com"}, {"url": "https://www.vulncheck.com/advisories/care-everywhere-gateway-hard-coded-credentials-rce-via-wildfly", "source": "disclosure@vulncheck.com"}, {"url": "https://gist.github.com/VAMorales/95874f23e27e17362b87133013834c0a", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-1392"}]}], "descriptions": [{"lang": "en", "value": "Care Everywhere Gateway 14.3.10 contains a hard-coded credentials vulnerability in the bundled WildFly 8.2.0.Final management interface that allows unauthenticated remote attackers to gain administrative access by using default credentials identical across all installations. Attackers can authenticate to the exposed WildFly management console on port 20990 and deploy a malicious Web Application Archive file through the Deployments interface to achieve remote code execution as the Windows machine account. Version 14.x.x was declared end-of-life (EOL) in 2017 and future releases have addressed the vulnerable finding."}, {"lang": "es", "value": "Care Everywhere Gateway 14.3.10 contiene una vulnerabilidad de credenciales codificadas de forma r\u00edgida en la interfaz de gesti\u00f3n de WildFly 8.2.0.Final incluida que permite a atacantes remotos no autenticados obtener acceso administrativo mediante el uso de credenciales predeterminadas id\u00e9nticas en todas las instalaciones. Los atacantes pueden autenticarse en la consola de gesti\u00f3n de WildFly expuesta en el puerto 20990 y desplegar un archivo de aplicaci\u00f3n web malicioso a trav\u00e9s de la interfaz de Despliegues para lograr la ejecuci\u00f3n remota de c\u00f3digo como la cuenta de m\u00e1quina de Windows. La versi\u00f3n 14.x.x fue declarada fin de vida \u00fatil (EOL) en 2017 y las futuras versiones han abordado el hallazgo vulnerable."}], "lastModified": "2026-10-24T13:10:00.147", "sourceIdentifier": "disclosure@vulncheck.com"}