CWE-798

High likelihood

Use of Hard-coded Credentials

Parent: CWE-1391 - Use of Weak Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

1,754 vulnerabilities with CWE-798
CVE-2026-25202 CRITICAL
MagicINFO 9 Server <21.1090.1 - Info Disclosure
CVSS 9.8
CVE-2026-1610 HIGH
Tenda AX12 Pro V2 16.03.49.24_cn - Info Disclosure
CVSS 8.1
CVE-2026-24840 HIGH
dokploy < 0.26.6 - Use of Hard-coded Credentials in Installation Script
CVSS 8.0
CVE-2026-24346 CRITICAL
EZCast Pro II <1.17478.146 - Info Disclosure
CVSS 9.1
CVE-2026-0622 MEDIUM
open5gs < 2.7.6 - Use of Hard-coded JWT Signing Key
CVSS 6.5
CVE-2026-1221 CRITICAL
BROWAN PrismX MX100 AP < 1.03.23.01 - Unauthenticated Database Access via Hardcoded Credentials
CVSS 9.8
CVE-2026-22911 MEDIUM
SICK TDC-X401GL Firmware - Insufficiently Protected Credentials via Firmware Update Files
CVSS 5.3
CVE-2025-59180 MEDIUM
Ericsson Packet Core Controller (PCC) - Use of Hard-Coded Credentials Vulnerability
CVE-2025-10560 CRITICAL
Hardcoded cloud credentials in Worksnaps client application binaries expose production cloud resources
CVE-2025-71317 CRITICAL
NetMan 204 Hard-coded Backdoor Credentials
CVSS 9.8
CVE-2025-68421 HIGH
Hardcoded credentials in Comarch ERP Optima
CVE-2025-10681 HIGH
Gardyn Mobile Application and Device Firmware Use Hard-coded Credentials
CVSS 8.6
CVE-2025-9497 CRITICAL
Hardcoded Upgrade Decryption Passwords
CVSS 9.8
CVE-2025-55263 HIGH
HCL Aftermarket DPC is affected by Hardcoded Sensitive Data
CVSS 7.3
CVE-2025-55262 HIGH
HCL Aftermarket DPC is affected by SQL Injection
CVSS 8.3
CVE-2025-12708 MEDIUM
IBM Concert 1.0.0-2.2.0 - Hard-Coded Credentials
CVSS 6.2
CVE-2025-15605 HIGH
Hardcoded Cryptographic Key in Configuration Encryption Mechanism on TP-Link Archer NX200, NX210, NX500 and NX600
CVSS 7.3
CVE-2025-41710 MEDIUM
FTP Server - Auth Bypass
CVSS 6.5
CVE-2025-13957 HIGH
SOCKS Proxy - Info Disclosure & RCE
CVE-2025-14923 MEDIUM
IBM WebSphere Liberty 17.0.0.3-26.0.0.2 - Auth Bypass
CVSS 4.7
CVE-2025-1242 CRITICAL
Gardyn Home Kit - Use of Hard-coded Credentials
CVSS 9.1
CVE-2025-13776 HIGH
Finka products - Use of Hard-coded Credentials
CVSS 7.1
CVE-2025-67304 CRITICAL
Ruckus Network Director <4.5.0.54 - Auth Bypass
CVSS 9.8
CVE-2025-33089 MEDIUM
IBM Concert 1.0.0-2.1.0 - Auth Bypass
CVSS 6.5
CVE-2025-69971 CRITICAL
FUXA < 1.3.0 - Hard-coded JWT Secret Key
CVSS 9.8
Details
Vulnerabilities 1,754
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits