Some common security misconfigurations include: Unpatched systems. Using default account credentials (i.e., usernames and passwords) Unprotected files and directories. -infosecinstitute.com