CVE-2026-44159
Tyler Identity Local (TID‑L) ships with default administrative credentials that users are not required to change before deployment. Because the product has not been distributed or supported since 2020, the vulnerability is largely historical but still poses a risk if the software is in use.
No official fix yet. If none appears within 45 days of first tracking, this entry is removed automatically.
Who is affected
Tyler Identity Local (TID‑L) – a legacy identity management product that has not been distributed since December 2020 and has not been supported since 2021.
Real-world impact
An attacker who discovers the default credentials can log in as an administrator, gaining full control over the system, including the ability to read, modify, or delete data and to install additional malicious software.
Why this severity
The CVSS score of 9.3 reflects the very high impact of a successful exploit: the attacker can compromise confidentiality, integrity, and availability of the entire system, and the attack requires no special privileges or user interaction.
What to do about it
- ›Change the default administrative credentials to a strong, unique password before using the system.
No official fix or mitigation is documented in the sources yet. Monitor the vendor advisory and apply the patch as soon as it is released.
NVD description
Timeline
- May 19, 2026 · May 19, 2026PublishedDisclosed and added to the National Vulnerability Database.
- Jul 24, 2026 · 12d agoAdvisory updatedThe NVD record was last revised.