References https://s4e.io/tools/azkaban-web-client-default-login-scanner https://github.com/0xmaximus/final_freaking_nuclei_templates/blob/main/azkaban-default-login.yaml https://azkaban.readthedocs.io/en/latest/userManager.html https://azkaban.github.io/azkaban/docs/latest/ https://github.com/azkaban/azkaban/blob/master/azkaban-web-server/src/test/resources/azkaban-users.xml https://azkaban.readthedocs.io/en/latest/getStarted.html
Related VulnerabilitiesPoCCVE-2023-54391: Proxmox VE - Default Credentials with TFA BypassPoCCVE-2026-61736: LightRAG <= 1.5.3 - Credentialed CORS Wildcard北京亿赛通科技发展有限责任公司电子文档安全管理系统CDGServer3-client存在前台sql漏洞PoCCVE-2017-8225: GoAhead Camera - Credential DisclosurePoCjohnson-controls-default-login: Johnson Controls Frick Quantum HD Compressors - Default LoginPoCmaven-settings-xml-exposure: Apache Maven settings.xml Credentials - ExposurePoCnuget-config-exposure: NuGet.config Package Source Credentials - ExposurePoCpypirc-credentials-exposure: Python .pypirc Credentials - ExposurePoCCVE-2026-18963: Keycloak < 26.7.2 - Unauthenticated Account Takeover via Reset-Credentials BypassPoClitellm-default-login: LiteLLM - Default LoginPoCCVE-2026-57219: RabbitMQ Management - OAuth 2 Client Secret DisclosurePoCnet-vision-default-login: Net Vision UPS Monitor - Default LoginPoC3xui-default-login: 3X-UI - Default Login