CVE-2025-35042: acropolis (CVSS 9.8)

Description

Airship AI Acropolis includes a default administrative account that uses the same credentials on every installation. Instances of Airship AI that do not change this account password are vulnerable to a remote attacker logging in and gaining the privileges of this account. Fixed in 10.2.35, 11.0.21, and 11.1.9.

Is your site exposed to CVE-2025-35042?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness Type (CWE)

CWE-1392 CWE-1392

Affected Products

Vendor	Product	Versions
airship.ai	acropolis	< 10.2.35
airship.ai	acropolis	11.0.0 — 11.0.21
airship.ai	acropolis	11.1.0 — 11.1.9

References

Other References

https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-265-01.json https://www.cve.org/CVERecord?id=CVE-2025-35042

Frequently Asked Questions

What is CVE-2025-35042? +

Airship AI Acropolis includes a default administrative account that uses the same credentials on every installation. Instances of Airship AI that do not change this account password are vulnerable to a remote attacker logging in and gaining the privileges of this account. Fixed in 10.2.35, 11.0.21, and 11.1.9. It has a CVSS v3.1 base score of 9.8 (CRITICAL).

How severe is CVE-2025-35042? +

CVE-2025-35042 has a CVSS v3.1 score of 9.8 out of 10, rated CRITICAL. This is a critical vulnerability that should be patched immediately.

What products are affected by CVE-2025-35042? +

CVE-2025-35042 affects products from airship.ai, specifically: acropolis. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2025-35042? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2026-9844

Use of default credentials vulnerability in Roche Diagnostics navify Digital Pathology (RabbitMQ Management interface modules) allows Default Usernames and Passwords. …

CVE-2021-47707

COMMAX CVD-Axx DVR 5.1.4 contains weak default administrative credentials that allow remote password attacks and disclose RTSP stream. Attackers can …

CVE-2026-22105

Delta UFC500 charging stations derive the default credentials of the Service account from character positions of the device serial number. …

CVE-2026-22109

The shipped WebUI template database retains the factory default passwords for all five account types in cleartext. Defaults are identical …

CVE-2025-12592

Legacy Vivotek Device firmware uses default credetials for the root and user login accounts.

CVE-2026-90456

An example environment-configuration file for a bundled inventory-management component ships with a fixed, publicly-known administrative password. A deployment that copies …

CVE-2025-35042