top of page
perceptive_background_267k.jpg

netbox-docker before 2.5.0 has a superuser account with default credentials (admin password for the admin account, and 0123456789abcdef0123456789abcdef01234567 …

Published:

10 March 2026 at 23:00:00

Alert date:

11 March 2026 at 14:02:13

Source:

nvd.nist.gov

Click to open the original link from this advisory

Cloud & Virtualization, Identity & Access, Enterprise Applications

CVE-2023-27573 affects netbox-docker versions before 2.5.0, which contains a superuser account with default credentials including an admin password and a hardcoded SUPERUSER_API_TOKEN. While nearly all users changed the default password, only about 90% changed the API token when deploying to production environments. The vulnerability was intentional for development use but became a security risk when users repurposed the product for production without changing defaults. The issue was resolved in version 2.5.0.

Technical details

Mitigation steps:

Affected products:

netbox-docker

Related links:

Related CVE's:

Related threat actors:

IOC's:

0123456789abcdef0123456789abcdef01234567

This article was created with the assistance of AI technology by Perceptive.

© 2025 by Perceptive Security. All rights reserved.

email: info@perceptivesecurity.com

Disclaimer: Deze website toont informatie afkomstig van externe bronnen. Perceptive aanvaardt geen verantwoordelijkheid voor de inhoud, juistheid of volledigheid van deze informatie.

bottom of page