CVE-2018-10723: Rangerstudio Directus

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

Directus 6.4.9 has a hardcoded admin password for the Admin account because of an INSERT statement in api/schema.sql.

Affected products

• Rangerstudio Directus: version 6.4.9 only

Published 2018-05-05. Last modified 2026-06-17.