The product contains hard-coded credentials, such as a password or cryptographic key.
1,752 vulnerabilities with CWE-798
CVE-2026-12628
CRITICAL
Hardcoded credential in the IBM Storage Protect Snapshot For Windows leads to unauthorized access to system
CVSS 9.1
CVE-2026-11746
CRITICAL
Central Dogma < 0.84.0 - Unauthenticated Arbitrary Command Execution via ZooKeeper Replication
CVE-2026-56265
CRITICAL
Crawl4AI - Authentication Bypass via Hardcoded JWT Signing Key
CVSS 9.8
CVE-2026-47847
MEDIUM
Bitnami/mariadb-galera - Use of Hard-coded Credentials
CVSS 5.3
CVE-2026-47846
CRITICAL
Bitnami/cassandra - Use of Hard-coded Credentials
CVSS 9.8
CVE-2026-5667
HIGH
Mitsubishi Electric Home Appliances - Hard-Coded Wi-Fi Credentials
CVE-2026-22312
HIGH
Radiflow iSAP Smart Collector 3.07-1 - Hard-coded API Token Command Execution
CVSS 8.6
CVE-2026-9260
MEDIUM
Canon Inc. Eos Network Setting Tool For Windows - Use of Hard-coded Cryptographic Key
CVSS 6.2
CVE-2026-50091
CRITICAL
Aqara Home Android SDK hardcoded keys
CVSS 9.1
CVE-2026-50083
CRITICAL
Aqara hardcoded OAuth client credentials
CVSS 9.1
CVE-2026-10557
CRITICAL
Yarbo Android/iOS Mobile Application and Cloud Infrastructure Use of Hard-coded Credentials
CVSS 9.8
CVE-2026-11849
CRITICAL
IEI Integration Corp｜iRM-IEI Remote Management - Hard-coded Credentials
CVSS 9.8
CVE-2026-47281
CRITICAL
Visual Studio Code Elevation of Privilege Vulnerability
CVSS 9.6
CVE-2026-11414
CRITICAL
Unauthenticated File Exfiltration in Altium Enterprise Server Vault Service via Hard-coded Cryptographic Key and Path Traversal
CVSS 9.8
CVE-2026-21404
MEDIUM
NAVTOR NavBox Use of Hard-coded Credentials
CVSS 6.3
CVE-2026-50213
HIGH
Acer Connect M6E 5G Portable WiFi Router - Bulk User Private Data Harvesting
CVSS 7.5
CVE-2026-49204
MEDIUM
Acer Connect M6E 5G Portable WiFi Router - Hard-Coded AWS Cognito Testing Accounts
CVSS 6.5
CVE-2026-8876
HIGH
Securly Chrome Extension < 3.0.7 - Hardcoded AES Passphrase Exposure
CVSS 7.3
CVE-2026-36616
MEDIUM
Mercusys AC12G (EU) V1 AC12G(EU)_V1_200909 - Hardcoded WiFi Driver Credentials Exposure
CVSS 5.9
CVE-2026-36606
HIGH
Mercusys AC12G (EU) V1 - Hardcoded DES Key Credential Exposure via Configuration Backup
CVSS 7.1
CVE-2026-42251
HIGH
Hard-coded credentials in KS-SOMED
CVE-2026-25600
MEDIUM
Trac PDBM 2.0.0.0 - Hardcoded Credential Encryption Secret
CVSS 6.4
CVE-2026-44825
HIGH
Apache Solr: Enabling BasicAuth using bin/solr CLI configures additional insecure users
CVSS 8.1
CVE-2026-42929
HIGH
MacGregor Voyage Data Recorder (VDR) G4e Use of Hard-coded Credentials
CVSS 8.3
CVE-2026-7786
CRITICAL
Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter Use of Hard-coded Credentials
CVSS 9.8
Details
Vulnerabilities
1,752
Exploit Likelihood
High