CVE-2026-31928 — DMP-5000 devices ship with unchangeable-by-default weak administrative web account granting full system access (CVE-2026-31928)

19/100

DMP-5000 devices ship with a default administrative web account with weak authentication that is not required to be changed during setup or operation, granting full system access. Owners should change default credentials and restrict network access to the management interface.