The product contains hard-coded credentials, such as a password or cryptographic key.
1,712 vulnerabilities with CWE-798
CVE-2026-48244
MEDIUM
Open ISES Tickets < 3.44.2 Hardcoded Google Maps API Key in settings.inc.php
CVSS 5.3
CVE-2026-48243
MEDIUM
Open ISES Tickets < 3.44.2 Hardcoded WhitePages API Key in wp1.php
CVSS 5.3
CVE-2026-48242
HIGH
Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in import_mdb.php
CVSS 8.1
CVE-2026-48241
HIGH
Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in loader.php
CVSS 8.1
CVE-2026-9139
CRITICAL
Taiko AG1000-01A Rev 7.3/8 Hard-coded Credentials via login.zhtml
CVSS 9.8
CVE-2026-8605
CRITICAL
Use of Hard-coded Credentials in ScadaBR
CVSS 9.8
CVE-2026-33893
HIGH
Siemens Teamcenter Hard-coded Credentials Vulnerability
CVSS 7.5
CVE-2026-42869
CRITICAL
SOCFortress CoPilot: Hardcoded JWT secret allows unauthenticated full admin compromise and lateral movement into all integrated SOC tools
CVSS 10.0
CVE-2026-40636
CRITICAL
Dell ECS 3.8.1.0-3.8.1.7 and ObjectScale < 4.3.0.0 - Unauthenticated Filesystem Access via Hard-coded Credentials
CVSS 9.8
CVE-2026-7414
CRITICAL
Hardcoded credentials in Yarbo robot firmware
CVSS 9.8
CVE-2026-8032
HIGH
PicoTronica e-Clinic Healthcare System ECHS echs.js hard-coded credentials
CVSS 7.3
CVE-2026-32834
HIGH
Easy PayPal Events & Tickets 1.3 Authentication Bypass via QR Code Scanning
CVSS 7.5
CVE-2026-42376
CRITICAL
D-Link DIR-456U A1 Hardcoded Telnet Backdoor Credentials
CVSS 9.8
CVE-2026-42375
CRITICAL
D-Link DIR-600L A1 Hardcoded Telnet Backdoor Credentials
CVSS 9.8
CVE-2026-42374
CRITICAL
D-Link DIR-600L B1 Hardcoded Telnet Backdoor Credentials
CVSS 9.8
CVE-2026-42373
CRITICAL
D-Link DIR-605L B2 Hardcoded Telnet Backdoor Credentials
CVSS 9.8
CVE-2026-42372
HIGH
D-Link DIR-605L A1 Hardcoded Telnet Backdoor Credentials
CVSS 8.8
CVE-2026-7579
HIGH
AstrBotDevs AstrBot Dashboard auth.py hard-coded credentials
CVSS 7.3
CVE-2026-41446
CRITICAL
WattBox 800 & 820 Series < 2.10.0.0 RCE via Diagnostic Endpoints
CVSS 9.8
CVE-2026-27785
HIGH
Milesight Cameras Use of Hard-coded Credentials
CVSS 8.8
CVE-2026-35503
CRITICAL
SenseLive X3050 Use of Hard-coded Credentials
CVSS 9.8
CVE-2026-6610
LOW
liangliangyy DjangoBlog Setting settings.py hard-coded credentials
CVSS 3.7
CVE-2026-6578
MEDIUM
liangliangyy DjangoBlog Setting settings.py hard-coded credentials
CVSS 5.6
CVE-2026-6574
HIGH
osuuu LightPicture API Upload Endpoint lp.sql hard-coded credentials
CVSS 7.3
CVE-2026-5189
CRITICAL
Nexus Repository 3 - Hardcoded Credential in Internal Database Component
Details
Vulnerabilities
1,712
Exploit Likelihood
High