netbox-docker before 2.5.0 has a superuser account with default credentials (admin password for the admin account, and 0123456789abcdef0123456789abcdef01234567 value for SUPERUSER_API_TOKEN).
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.00566·Published 2026-03-11·Fixed in 2.5.0CWE-1392