CWE-321

311 vulnerabilities with CWE-321

CVE-2026-31986 CRITICAL

Apache OFBiz: Unauthenticated RCE via Default JWT Signing Key and Widget Template Injection

CVSS 9.1

CVE-2026-8739 MEDIUM

Sanluan PublicCMS SafeConfigComponent.java getSignKey hard-coded key

CVSS 5.3

CVE-2026-25107 MEDIUM

ELECOM WRC-X Series - Use of Hard-coded Cryptographic Key in Configuration Backup

CVSS 6.5

CVE-2026-44278 LOW

FortiClientWindows 7.2.0-7.4.2 - Information Disclosure via Hard-coded Cryptographic Key

CVSS 2.3

CVE-2026-33362 HIGH

Meari SDK hardcoded cryptographic keys

CVSS 8.6

CVE-2026-8243 MEDIUM

Industrial Application Software IAS Canias ERP JNLP Deployment Endpoint hard-coded key

CVSS 5.3

CVE-2026-6787 HIGH

Usage of a hard-coded cryptographic key in WatchGuard Agent allows inclusion of code into existing process

CVSS 7.8

CVE-2026-42518 HIGH

Information Disclosure Vulnerability in e-Sushrut HMIS

CVE-2026-7306 MEDIUM

Xuxueli xxl-job OpenAPI Endpoint OpenApiController.java hard-coded key

CVSS 5.6

CVE-2026-32644 CRITICAL

Milesight Cameras Use of Hard-coded Cryptographic Key

CVSS 9.8

CVE-2026-7018 MEDIUM

Datavane Datavines JWT Token TokenManager.java hard-coded key

CVSS 5.6

CVE-2026-6611 LOW

liangliangyy DjangoBlog File Upload Endpoint settings.py hard-coded key

CVSS 3.1

CVE-2026-32958 MEDIUM

silex technology SD-330AC <=Ver.1.42 - Auth Bypass

CVSS 6.5

CVE-2026-6580 HIGH

liangliangyy DjangoBlog Amap API Call views.py hard-coded key

CVSS 7.3

CVE-2026-32324 HIGH

Anviz CX7 Firmware Use of Hard-coded Cryptographic Key

CVSS 7.7

CVE-2026-5426 CRITICAL

KnowledgeDeliver deployments before February 24, 2026 use a static ASP.NET/IIS machineKey value

CVSS 9.1

CVE-2026-39810 MEDIUM

FortiClientEMS 7.4.0-7.4.5 - Information Disclosure via Hard-coded Cryptographic Key

CVSS 6.0

CVE-2026-33266 HIGH

Apache OpenMeetings: Hardcoded Remember-Me Cookie Encryption Key and Salt

CVSS 7.5

CVE-2026-5622 LOW

hcengineering Huly Platform JWT Token token.ts hard-coded key

CVSS 3.7

CVE-2026-5549 MEDIUM

Tenda AC10 RSA 2048-bit Private Key privkeySrv.pem hard-coded key

CVSS 5.3

CVE-2026-5527 MEDIUM

Tenda 4G03 Pro ECDSA P-256 Private Key server.key hard-coded key

CVSS 5.3

CVE-2026-5471 LOW

Investory Toy Planet Trouble App app.investory.toyfactory google-services-desktop.json hard-coded key

CVSS 3.3

CVE-2026-5462 LOW

Wahoo Fitness SYSTM App com.WahooFitness.SYSTM BuildConfig.java hard-coded key

CVSS 3.3

CVE-2026-5458 LOW

Noelse Individuals & Pro App com.afone.noelse BuildConfig.java hard-coded key

CVSS 3.3

CVE-2026-5457 LOW

PropertyGuru AgentNet Singapore App com.allproperty.android.agentnet BuildConfig.java hard-coded key

CVSS 3.3