CWE-798

High likelihood

Use of Hard-coded Credentials

Parent: CWE-1391 - Use of Weak Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

1,712 vulnerabilities with CWE-798
CVE-2025-32888 HIGH
goTenna Mesh Firmware 1.1.12 - Use of Hard-coded Credentials
CVSS 7.3
CVE-2025-23179 MEDIUM
Ribbon Apollo 9608 v9.6R3 - Hard-Coded Credentials
CVSS 5.5
CVE-2025-32985 CRITICAL
NETSCOUT nGeniusONE < 6.4.0 - Use of Hard-coded Credentials in JAR Files
CVSS 9.8
CVE-2025-46617 HIGH
Quantum StorNext Web GUI API <7.2.4 - Info Disclosure
CVSS 7.2
CVE-2025-46274 CRITICAL
Planet Technology UNI-NMS-Lite < 1.0b211018 - Unauthenticated Use of Hard-coded Credentials
CVSS 9.8
CVE-2025-46273 CRITICAL
UNI-NMS-Lite - Privilege Escalation
CVSS 9.8
CVE-2025-2765 HIGH
CarlinKit CPC200-CCPA - Unauthenticated Authentication Bypass via Hard-Coded Credentials
CVSS 8.8
CVE-2025-28230 CRITICAL
JMBroadcast JMB0150 Firmware v1.0 - Use of Hard-coded Credentials
CVSS 9.1
CVE-2025-3426 HIGH
Intellispace Portal - Info Disclosure
CVE-2025-30406 CRITICAL KEV
Gladinet CentreStack < 16.4.10315.56368 Use of Hard-coded Key Leads to Unauthenticated RCE
CVSS 9.0
CVE-2025-30118 HIGH
Audi Universal Traffic Recorder 2.88 - DoS
CVSS 7.5
CVE-2025-2538 CRITICAL
Esri Portal for ArcGIS < 11.4 - Unauthenticated Administrative Access via Hardcoded Credentials
CVSS 9.8
CVE-2025-2556 MEDIUM
Audi UTR Dashcam <2.89-2.90 - Info Disclosure
CVSS 4.3
CVE-2025-30137 CRITICAL
G-Net GNET APK <2.6.2 - Info Disclosure
CVSS 9.8
CVE-2025-30123 CRITICAL
ROADCAM X3 - Use of Hard-coded Credentials in Mobile App APK
CVSS 9.8
CVE-2025-30122 CRITICAL
ROADCAM X3 - Use of Hard-coded Credentials
CVSS 9.8
CVE-2025-30113 CRITICAL
Forvia Hella HELLA Driving Recorder DR 820 - Info Disclosure
CVSS 9.8
CVE-2025-30109 MEDIUM
IROAD APK 5.2.5 - Use of Hard-coded Credentials
CVSS 6.5
CVE-2025-1724 HIGH
Zohocorp's ManageEngine Analytics Plus & Zoho Analytics <6130 - Pri...
CVSS 7.4
CVE-2025-2343 HIGH
IROAD Dash Cam X5-X6 <20250308 - Hard-coded Credentials
CVSS 7.5
CVE-2025-2342 MEDIUM
IROAD X5 Mobile App <5.2.5 - Hard-Coded Credentials
CVSS 5.3
CVE-2025-2322 HIGH
springboot-openai-chatgpt - Hard-Coded Credentials
CVSS 7.3
CVE-2025-27255 HIGH
GE Vernova EnerVista UR Setup - Privilege Escalation
CVSS 8.0
CVE-2025-1393 CRITICAL
Product <unknown> - Privilege Escalation
CVSS 9.8
CVE-2025-27643 CRITICAL
Vasion Print < 20.0.2368 and Virtual Appliance < 22.0.933 - Hardcoded AWS API Key Exposure
CVSS 9.8
Details
Vulnerabilities 1,712
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits