{"id":"CVE-2025-55740","aliases":["GHSA-pr72-8fxw-xx22","GO-2025-3896"],"url":"https://o3.security/vulnerability/CVE-2025-55740","summary":"Default Credentials in nginx-defender Configuration Files","details":"nginx-defender is a high-performance, enterprise-grade Web Application Firewall (WAF) and threat detection system engineered for modern web infrastructure. This is a configuration vulnerability affecting nginx-defender deployments. Example configuration files\nconfig.yaml and docker-compose.yml contain default credentials (default_password: \"change_me_please\", GF_SECURITY_ADMIN_PASSWORD=admin123). If users deploy nginx-defender without changing these defaults, attackers with network access could gain administrative control, bypassing security protections. The issue is addressed in v1.5.0 and later.","published":"2025-08-19T19:52:25.777Z","modified":"2026-07-15T01:49:06.121031728Z","cvss":{"score":6.5,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Go","name":"github.com/Anipaleja/nginx-defender","fixedVersion":"1.5.0"}],"fix":null,"references":[{"type":"ADVISORY","url":"https://github.com/Anipaleja/nginx-defender/security/advisories/GHSA-pr72-8fxw-xx22"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/55xxx/CVE-2025-55740.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-55740"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-15T01:49:06.121031728Z"}}