CVE-2023-36651: Prolion Cryptospike

High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days.

Hidden and hard-coded credentials in ProLion CryptoSpike 3.0.15P2 allow remote attackers to login to web management as super-admin and consume the most privileged REST API endpoints via these credentials.

Affected products

• Prolion Cryptospike: version 3.0.15 only

Published 2023-12-12. Last modified 2026-06-17.