The product contains hard-coded credentials, such as a password or cryptographic key.
1,754 vulnerabilities with CWE-798
CVE-2025-40537
HIGH
SolarWinds Web Help Desk < 2026.1 - Use of Hard-coded Credentials
CVSS 7.5
CVE-2025-59107
HIGH
Dormakaba FWServiceTool - Info Disclosure
CVE-2025-59096
MEDIUM
Kaba exos 9300 - Use of Hard-coded Credentials in U9ExosAdmin.exe
CVE-2025-59095
MEDIUM
Kaba exos 9300 - Use of Hard-coded Credentials in Kaba.EXOS.common.dll
CVE-2025-59092
HIGH
Kaba exos 9300 < 4.4.0 - Unauthenticated Use of Hard-coded Credentials in RPC Service
CVE-2025-59091
CRITICAL
Kaba exos 9300 < 4.4.1 - Use of Hard-coded Credentials in Datapoint Server
CVE-2025-58744
HIGH
Milner ImageDirector Capture <7.6.3.25808 - Default Credentials
CVSS 7.5
CVE-2025-14115
HIGH
IBM Sterling Connect:Direct for UNIX Container - Info Disclosure
CVSS 8.4
CVE-2025-69426
CRITICAL
Ruckus vRIoT IoT Controller <3.0.0.0 - Privilege Escalation
CVE-2025-69425
CRITICAL
Ruckus vRIoT IoT Controller <3.0.0.0 - Command Injection
CVE-2025-7072
CRITICAL
KAON CG3000TC/CG3000T - Command Injection
CVE-2025-15371
HIGH
Tenda i24, 4G03 Pro, 4G05, 4G08, G0-8G-PoE, Nova MW5G, TEG5328F - Hard-Coded Credentials in Shadow File
CVSS 7.8
CVE-2025-68926
CRITICAL
RustFS <1.0.0-alpha.78 - Auth Bypass
CVSS 9.8
CVE-2025-15107
LOW
Actiontech SQLE <=4.2511.0 - Use of Hard-coded Cryptographic Key
CVSS 3.7
CVE-2025-15105
LOW
maxun < 0.0.28 - Use of Hard-coded Cryptographic Key via api_key Argument
CVSS 3.7
CVE-2025-68948
HIGH
SiYuan < 3.5.2 - Session Hijacking via Hardcoded Cryptographic Key
CVSS 8.1
CVE-2025-33222
CRITICAL
NVIDIA Isaac Launchable - Use of Hard-coded Credentials
CVSS 9.8
CVE-2025-67418
CRITICAL
ClipBucket 5.3-5.5.2 - Unauthenticated Remote Administrative Access via Hardcoded Credentials
CVSS 9.8
CVE-2025-56157
CRITICAL
Dify < 1.5.1 - Use of Hard-coded PostgreSQL Credentials in docker-compose.yaml
CVSS 9.8
CVE-2025-7358
HIGH
SoliClub < 5.3.7 - Authentication Abuse via Hard-coded Credentials
CVSS 7.5
CVE-2025-1029
HIGH
Utarit SoliClub <5.3.7 - Info Disclosure
CVSS 7.5
CVE-2025-65855
MEDIUM
Netun Solutions HelpFlash IoT v18_178_221102_ASCII_PRO_1R5_50 - RCE
CVSS 6.6
CVE-2025-14096
HIGH
Radiometer Products - Info Disclosure
CVSS 8.4
CVE-2025-67809
MEDIUM
Zimbra Collaboration 10.0-10.1 < 10.1.13 - Hardcoded Flickr API Credentials in Zimlet
CVSS 4.7
CVE-2025-36752
CRITICAL
Growatt ShineLan-X Firmware 3.6.0.0-3.6.0.1 - Use of Hard-coded Credentials
CVSS 9.8
Details
Vulnerabilities
1,754
Exploit Likelihood
High