CWE-798

1,755 vulnerabilities with CWE-798

CVE-2025-55279 MEDIUM

ZKTeco WL20 <= ZLM31-FXO1-3.1.8 - Hard-coded Private Key Exposure

CVE-2025-54465 MEDIUM

ZKTeco WL20 Biometric Attendance System <= ZLM31-FXO1-3.1.8 - Hard-coded MQTT Credentials Exposure

CVE-2025-3831 HIGH

Harmony SASE - Exposure of Sensitive Information via Log File Upload

CVSS 8.1

CVE-2025-26398 MEDIUM

SolarWinds Database Performance Analyzer < 2025.3 - Use of Hard-coded Cryptographic Key

CVSS 5.6

CVE-2025-8730 CRITICAL

Belkin F9K1009/F9K1010 <2.00.04/2.09 - Hard-coded Credentials

CVSS 9.8

CVE-2025-7768 CRITICAL

Tigo Energy CCA - Privilege Escalation

CVE-2025-54872 HIGH

onion-site-template <3196bd89 - Info Disclosure

CVE-2025-8530 MEDIUM

eladmin < 2.7 - Use of Default Credentials in Druid Configuration

CVSS 5.3

CVE-2025-38741 HIGH

Dell Enterprise SONiC OS <4.5.0 - Info Disclosure

CVSS 7.5

CVE-2025-26476 HIGH

Dell ECS <3.8.1.5/ObjectScale 4.0.0.0 - Memory Corruption

CVSS 8.4

CVE-2025-51536 CRITICAL

OpenAtlas <8.11.0 - Info Disclosure

CVSS 9.8

CVE-2025-44643 HIGH

Draytek AP903 <1.4.18-AP918R <1.4.9 - Privilege Escalation

CVSS 8.6

CVE-2025-37112 MEDIUM

HPE Telco Network Function Virtual Orchestrator 7.0.0-7.2.9 - Use of Hard-coded Credentials

CVSS 6.0

CVE-2025-37111 MEDIUM

HPE Telco Network Function Virtual Orchestrator 7.0.0-7.2.9 - Use of Hard-coded Credentials

CVSS 6.0

CVE-2025-30125 CRITICAL

Marbella KR8s Dashcam FF <2.0.8 - Info Disclosure

CVSS 9.8

CVE-2025-8231 MEDIUM

D-Link DIR-890L <111b04 - Hard-Coded Credentials

CVSS 6.8

CVE-2025-45466 HIGH

Unitree Go1 <= Go1_2022_05_11 - Incorrect Access Control via Hard-coded Credentials

CVSS 8.8

CVE-2025-31953 HIGH

HCL iAutomate - Use of Hard-coded Credentials

CVSS 7.1

CVE-2025-54455 CRITICAL

Samsung MagicINFO 9 Server < 21.1080.0 - Authentication Bypass via Hard-coded Credentials

CVSS 9.1

CVE-2025-54454 CRITICAL

Samsung MagicINFO 9 Server < 21.1080.0 - Authentication Bypass via Hard-coded Credentials

CVSS 9.1

CVE-2025-4130 HIGH

PAVO Pay <13.05.2025 - Info Disclosure

CVSS 7.5

CVE-2025-4570 MEDIUM

MyASUS - Use of Hard-coded Credentials

CVE-2025-4569 HIGH

MyASUS - Use of Hard-coded Credentials

CVE-2025-4049 HIGH

SIGNUM-NET FARA <5.0.80.34 - Info Disclosure

CVE-2025-6982 MEDIUM

TP-Link Archer C50 - Info Disclosure