CVE-2025-67304
Critical
Description
In Ruckus Network Director (RND) < 4.5.0.54, the OVA appliance contains hardcoded credentials for the ruckus PostgreSQL database user. In the default configuration, the PostgreSQL service is accessible over the network on TCP port 5432. An attacker can use the hardcoded credentials to authenticate remotely, gaining superuser access to the database. This allows creation of administrative users for the web interface, extraction of password hashes, and execution of arbitrary OS commands.
SeverityCritical
CVSS9.8
Exploit probability—
ProductCommscope Ruckus Network Director
PublishedFeb 19, 2026
First seenFeb 19, 2026
Weakness typeCWE-798Hard-coded credentials
How to fix
Update
- commscope ruckus_network_director4.5.0.56 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| commscope ruckus_network_director | v < 4.5.0.56 | 4.5.0.56 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.