Newbee-ltd vulnerabilities
We track 2 vulnerabilities in Newbee-ltd products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 12, 2026.
2vulnerabilities
2critical
0high
0exploited
9.4average CVSS score
Latest Newbee-ltd vulnerabilities
- 9.1 Critical severity
newbee-mall: Use of a Broken or Risky Cryptographic Algorithm
newbee-mall stores and verifies user passwords using an unsalted MD5 hashing algorithm. The implementation does not incorporate per-user salts or computational cost controls, enabling attackers who obtain password hashes through database exposure, backup leaka
- 9.8 Critical severity
newbee-mall: Use of Hard-coded Credentials
newbee-mall includes pre-seeded administrator accounts in its database initialization script. These accounts are provisioned with a predictable default password. Deployments that initialize or reset the database using the provided schema and fail to change the