The product contains hard-coded credentials, such as a password or cryptographic key.
1,755 vulnerabilities with CWE-798
CVE-2025-36752
CRITICAL
Growatt ShineLan-X Firmware 3.6.0.0-3.6.0.1 - Use of Hard-coded Credentials
CVSS 9.8
CVE-2025-36747
CRITICAL
Growatt ShineLan-X Firmware 3.6.0.0-3.6.0.1 - Use of Hard-coded Credentials in FTP Server
CVSS 9.8
CVE-2025-14611
CRITICAL
KEV
Gladinet CentreStack & Triofox <16.12.10420.56791 - Code Injection
CVSS 9.8
CVE-2025-54947
CRITICAL
Apache StreamPark 2.0.0-2.1.7 - Use of Hard-coded Cryptographic Key
CVSS 9.8
CVE-2025-65823
CRITICAL
Meatmeet Pro WiFi & Bluetooth Meat Thermometer Firmware - Use of Hard-coded Credentials
CVSS 9.8
CVE-2025-13954
CRITICAL
EZCast Pro II <1.17478.146 - Auth Bypass
CVE-2025-41696
MEDIUM
Phoenix Contact FL Switch Firmware < 3.50 - Unauthenticated Filesystem Access via UART Port
CVSS 4.6
CVE-2025-40938
HIGH
SIMATIC CN 4100 < 4.0.1 - Use of Hard-coded Credentials
CVSS 8.1
CVE-2025-14126
HIGH
TOZED ZLT M30S/ZLT M30S PRO <1.47/3.09.06 - Hard-Coded Credentials
CVSS 8.8
CVE-2025-65730
HIGH
goaway < 0.62.19 - Authentication Bypass via Hardcoded JWT Secret
CVSS 8.8
CVE-2025-66237
MEDIUM
DCIM dcTrack - Privilege Escalation
CVSS 6.7
CVE-2025-29268
CRITICAL
ALLNET ALL-RUT22GW v3.3.8 - Use of Hard-coded Credentials in libicos.so
CVSS 9.8
CVE-2025-64778
HIGH
mirion biodose/nmis < 23.0 - Use of Hard-coded Credentials
CVSS 7.3
CVE-2025-66454
MEDIUM
arcade-mcp < 1.5.4 - Unauthenticated Authentication Bypass via Hardcoded Worker Secret
CVSS 6.5
CVE-2025-54341
MEDIUM
Desktop Alert PingAlert Application Server 6.1.0.11-6.1.1.2 - Use of Hard-coded Credentials
CVSS 5.3
CVE-2025-63433
MEDIUM
Xtooltech Xtool AnyScan <4.40.40 - Code Injection
CVSS 4.6
CVE-2025-59669
MEDIUM
FortiWeb 7.0.0-7.6.0 - Authenticated Use of Hard-coded Credentials in Redis Service
CVSS 5.3
CVE-2025-64766
MEDIUM
NixOS's Onlyoffice <25.05 - Info Disclosure
CVSS 5.3
CVE-2025-13252
HIGH
shsuishang ShopSuite ModulithShop <45a99398cec3b7ad7ff9383694f0b533...
CVSS 7.3
CVE-2025-33186
HIGH
NVIDIA AIStore - Privilege Escalation/Info Disclosure/Data Tampering
CVSS 8.8
CVE-2025-42890
CRITICAL
SAP SQL Anywhere Monitor (Non-GUI) - Use of Hard-coded Credentials
CVSS 10.0
CVE-2025-34501
HIGH
Deck Mate 2 < all known versions prior to 2025-10-23 - Use of Hard-coded Credentials
CVE-2025-62777
HIGH
PLANEX MZK-DP300N <= 1.07 - Unauthenticated Remote Code Execution via Telnet Hard-Coded Credentials
CVSS 8.8
CVE-2025-41109
MEDIUM
Ghost Robotics Vision 60 v0.27.2 - Unauthenticated Network Access via Physical Ports
CVSS 4.6
CVE-2025-41722
HIGH
Sauter modulo 6 and EY-modulo 5 - Use of Hard-coded Credentials in wsc Server
CVSS 7.5
Details
Vulnerabilities
1,755
Exploit Likelihood
High