CVE-2026-28745: critical vulnerability in Red Lion Controls 700 Series
Red Lion Controls N-Tron 700 Series Storing Passwords in a Recoverable Format
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 9.3epss 0.2%
Usernames and passwords, including the default credentials, are stored in the configuration file using weak encryption. If the default credentials are known by a malicious user, they could obtain other credentials on the system.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Red Lion Controls · 700 SeriesRelated CVEs — Red Lion Controls 700 Series
In the same product, most dangerous first.
CVE-2026-39460CRITICALRed Lion Controls N-Tron 700 Series Insufficiently Protected CredentialsEPSS 0.3%CVE-2026-33367CRITICALRed Lion Controls N-Tron 700 Series Missing Authentication for Critical FunctionEPSS 0.3%CVE-2026-39453HIGHRed Lion Controls N-Tron 700 Series Reachable AssertionEPSS 0.3%CVE-2026-29797HIGHRed Lion Controls N-Tron 700 Series Download of Code Without Integrity CheckEPSS 0.2%CVE-2026-33272MEDIUMRed Lion Controls N-Tron 700 Series Authentication Bypass Using an Alternate Path or ChannelEPSS 0.1%CVE-2026-32645CRITICALRed Lion Controls N-Tron 700 Series Use of Hard-Coded CredentialsEPSS 0.1%