The product contains hard-coded credentials, such as a password or cryptographic key.
1,754 vulnerabilities with CWE-798
CVE-2026-42929
HIGH
MacGregor Voyage Data Recorder (VDR) G4e Use of Hard-coded Credentials
CVSS 8.3
CVE-2026-7786
CRITICAL
Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter Use of Hard-coded Credentials
CVSS 9.8
CVE-2026-45631
CRITICAL
Dokploy: Pre-Auth Admin Takeover via Hardcoded Authentication Secret
CVSS 10.0
CVE-2026-46376
CRITICAL
FreePBX UCP - Hardcoded Template Credentials
CVSS 9.8
CVE-2026-49323
MEDIUM
Indian Scout Bobber 2025 WCM-to-ECM weak authentication
CVSS 4.3
CVE-2026-49201
CRITICAL
Acer Wave 7 router: Hardcoded Cryptographic Key
CVSS 9.8
CVE-2026-45039
CRITICAL
RustFS: Internode RPC HMAC secret falls back to public default credential, enabling peer impersonation
CVSS 9.8
CVE-2026-24444
CRITICAL
SDMC NE6037 Hardcoded Password via mgmt.php/npcmd.php
CVSS 9.8
CVE-2026-5065
HIGH
IBM Controller is affected by vulnerabilities
CVSS 8.8
CVE-2026-36538
HIGH
Netis AC1200 Router NC21 V4.0.1.4296 - Hard-coded Root Credential in /etc/shadow.sample
CVSS 7.3
CVE-2026-48245
MEDIUM
Open ISES Tickets < 3.44.2 Hardcoded Google Maps API Key in tables.php
CVSS 5.3
CVE-2026-48244
MEDIUM
Open ISES Tickets < 3.44.2 Hardcoded Google Maps API Key in settings.inc.php
CVSS 5.3
CVE-2026-48243
MEDIUM
Open ISES Tickets < 3.44.2 Hardcoded WhitePages API Key in wp1.php
CVSS 5.3
CVE-2026-48242
HIGH
Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in import_mdb.php
CVSS 8.1
CVE-2026-48241
HIGH
Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in loader.php
CVSS 8.1
CVE-2026-9139
CRITICAL
Taiko AG1000-01A Rev 7.3/8 Hard-coded Credentials via login.zhtml
CVSS 9.8
CVE-2026-8605
CRITICAL
Use of Hard-coded Credentials in ScadaBR
CVSS 9.8
CVE-2026-33893
HIGH
Siemens Teamcenter Hard-coded Credentials Vulnerability
CVSS 7.5
CVE-2026-42869
CRITICAL
SOCFortress CoPilot: Hardcoded JWT secret allows unauthenticated full admin compromise and lateral movement into all integrated SOC tools
CVSS 10.0
CVE-2026-40636
CRITICAL
Dell ECS 3.8.1.0-3.8.1.7 and ObjectScale < 4.3.0.0 - Unauthenticated Filesystem Access via Hard-coded Credentials
CVSS 9.8
CVE-2026-7414
CRITICAL
Hardcoded credentials in Yarbo robot firmware
CVSS 9.8
CVE-2026-8032
HIGH
PicoTronica e-Clinic Healthcare System ECHS echs.js hard-coded credentials
CVSS 7.3
CVE-2026-32834
HIGH
Easy PayPal Events & Tickets 1.3 Authentication Bypass via QR Code Scanning
CVSS 7.5
CVE-2026-42376
CRITICAL
D-Link DIR-456U A1 Hardcoded Telnet Backdoor Credentials
CVSS 9.8
CVE-2026-42375
CRITICAL
D-Link DIR-600L A1 Hardcoded Telnet Backdoor Credentials
CVSS 9.8
Details
Vulnerabilities
1,754
Exploit Likelihood
High