Critical severity9.8NVD Advisory· Published Feb 6, 2026· Updated Jun 17, 2026

CVE-2026-25803

Description

3DP-MANAGER is an inbound generator for 3x-ui. In version 2.0.1 and prior, the application automatically creates an administrative account with known default credentials (admin/admin) upon the first initialization. Attackers with network access to the application's login interface can gain full administrative control, managing VPN tunnels and system settings. This issue will be patched in version 2.0.2.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Denpiligrim/3dp Manager
cpe:2.3:a:denpiligrim:3dp-manager:*:*:*:*:*:*:*:*
Range: <=2.0.1
RDP Manager/RDP Managerllm-fuzzy
Range: <=2.0.1
denpiligrim/3dp-managerv5
Range: <= 2.0.1

Patches

Vulnerability mechanics

References

github.com/denpiligrim/3dp-manager/commit/f568de41de97dd1b70a963708a1ee18e52b9d248nvdPatch
github.com/denpiligrim/3dp-manager/security/advisories/GHSA-5x57-h7cw-9jmwnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000