agentprime: CWE-1394Every new CWE-1394 Advisory and CVE.https://agentprime.io/CVE-2026-121818: About Time Technologies｜Herowatch Go - Security Misconfigurationhttps://agentprime.io/advisories/CVE-2026-121818/https://agentprime.io/advisories/CVE-2026-121818/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 06:26:53 GMTCVECVE-2026-120442: ape-volo-admin before 3.6.1 Hardcoded JWT Signing Key Authentication Bypasshttps://agentprime.io/advisories/CVE-2026-120442/https://agentprime.io/advisories/CVE-2026-120442/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 14:29:03 GMTCVEcriticalCVE-2026-119660: MuseBot before 2.0.0 Authentication Bypass via Hard-Coded Session Keyhttps://agentprime.io/advisories/CVE-2026-119660/https://agentprime.io/advisories/CVE-2026-119660/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 14:16:21 GMTCVEcriticalCVE-2026-92777: A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code.https://agentprime.io/advisories/CVE-2026-92777/https://agentprime.io/advisories/CVE-2026-92777/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 23:18:01 GMTCVECVE-2026-111367: BillionMail through 4.9 Forgeable JWTs via Default Signing Keyhttps://agentprime.io/advisories/CVE-2026-111367/https://agentprime.io/advisories/CVE-2026-111367/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 21:43:50 GMTCVECVE-2020-37281: Gravitee API Management through 4.12.22 Default JWT Secret Authentication Bypasshttps://agentprime.io/advisories/CVE-2020-37281/https://agentprime.io/advisories/CVE-2020-37281/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 14:16:28 GMTCVEcriticalCVE-2026-72895: Siemens SIMATIC IPC BX-21A: A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13)…https://agentprime.io/advisories/CVE-2026-72895/https://agentprime.io/advisories/CVE-2026-72895/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 09:18:54 GMTCVECVE-2026-107177: Express Gateway through 1.16.11 Hardcoded Default cipherKey Exposes OAuth Tokenshttps://agentprime.io/advisories/CVE-2026-107177/https://agentprime.io/advisories/CVE-2026-107177/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 12:48:19 GMTCVECVE-2026-75870: Punk versions before 0.18 for Perl allow session cookie forgery via an empty default HMAC key when a session is declared without a secrethttps://agentprime.io/advisories/CVE-2026-75870/https://agentprime.io/advisories/CVE-2026-75870/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sat, 22 Aug 2026 13:35:58 GMTCVEcriticalCVE-2026-54887: DTLS server cookie bypass during startup window due to empty initial cookie secrethttps://agentprime.io/advisories/CVE-2026-54887/https://agentprime.io/advisories/CVE-2026-54887/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 Jul 2026 16:06:04 GMTCVECVE-2026-5039: Predictable Default Cryptographic Key Used for DES Encryption in TP-Link TL-WL841Nhttps://agentprime.io/advisories/CVE-2026-5039/https://agentprime.io/advisories/CVE-2026-5039/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Apr 2026 16:10:13 GMTCVECVE-2026-20709: Intel(R) Pentium(R) Processor Silver Series…: Use of Default Cryptographic Key in the hardware for some Intel(R) Pentium(R) Processor…https://agentprime.io/advisories/CVE-2026-20709/https://agentprime.io/advisories/CVE-2026-20709/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Apr 2026 18:20:48 GMTCVECVE-2026-2215: rachelos WeRSS we-mp-rss JWT auth.py default keyhttps://agentprime.io/advisories/CVE-2026-2215/https://agentprime.io/advisories/CVE-2026-2215/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Feb 2026 04:32:06 GMTCVECVE-2026-25815: Fortinet FortiOS: Fortinet FortiOS through 7.6.6 allows attackers to decrypt LDAP credentials stored in…https://agentprime.io/advisories/CVE-2026-25815/https://agentprime.io/advisories/CVE-2026-25815/CVSS 3.2 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Feb 2026 21:14:09 GMTCVECVE-2025-41742: Sprecher Automation: SPRECON-E series has a critical vulnerability due to the use of static cryptographic keys in system componentshttps://agentprime.io/advisories/CVE-2025-41742/https://agentprime.io/advisories/CVE-2025-41742/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Dec 2025 10:39:08 GMTCVEcriticalCVE-2025-41744: Sprecher Automation: SPRECON-E series has static default key material for TLS connectionshttps://agentprime.io/advisories/CVE-2025-41744/https://agentprime.io/advisories/CVE-2025-41744/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Dec 2025 10:38:47 GMTCVEcriticalCVE-2025-55049: Use of Default Cryptographic Key (CWE-1394)https://agentprime.io/advisories/CVE-2025-55049/https://agentprime.io/advisories/CVE-2025-55049/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Sep 2025 18:52:00 GMTCVEcriticalCVE-2025-44954: RUCKUS SmartZone: RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a…https://agentprime.io/advisories/CVE-2025-44954/https://agentprime.io/advisories/CVE-2025-44954/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 04 Aug 2025 00:00:00 GMTCVEcriticalCVE-2025-1688: System configuration password resethttps://agentprime.io/advisories/CVE-2025-1688/https://agentprime.io/advisories/CVE-2025-1688/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Apr 2025 10:13:51 GMTCVECVE-2025-26849: There is a Hard-coded Cryptographic Key in Docusnap 13.0.1440.24261, and earlier and later versions.https://agentprime.io/advisories/CVE-2025-26849/https://agentprime.io/advisories/CVE-2025-26849/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Mar 2025 00:00:00 GMTCVECVE-2024-48956: Serviceware Processes 6.0 through 7.3 before 7.4 allows attackers without valid authentication to send a specially crafted HTTP request to a service endpoint resulting in remote code execution.https://agentprime.io/advisories/CVE-2024-48956/https://agentprime.io/advisories/CVE-2024-48956/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Dec 2024 00:00:00 GMTCVEcriticalCVE-2024-11619: macrozheng mall JWT Token default keyhttps://agentprime.io/advisories/CVE-2024-11619/https://agentprime.io/advisories/CVE-2024-11619/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 22 Nov 2024 21:00:10 GMTCVECVE-2024-10748: Cosmote Greece What's Up App Realm Database RealmDB.java default keyhttps://agentprime.io/advisories/CVE-2024-10748/https://agentprime.io/advisories/CVE-2024-10748/CVSS 2.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 04 Nov 2024 00:31:04 GMTCVECVE-2024-1275: Vulnerability in Baxter Welch Allyn Connex Spot Monitorhttps://agentprime.io/advisories/CVE-2024-1275/https://agentprime.io/advisories/CVE-2024-1275/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 31 May 2024 17:23:19 GMTCVEcriticalCVE-2024-29037: Default secret use for initial deploymenthttps://agentprime.io/advisories/CVE-2024-29037/https://agentprime.io/advisories/CVE-2024-29037/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 20 Mar 2024 20:42:19 GMTCVEcriticalCVE-2023-6451: Publicly Known Cryptographic Machine Key In Procura Portal Applicationhttps://agentprime.io/advisories/CVE-2023-6451/https://agentprime.io/advisories/CVE-2023-6451/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Feb 2024 04:06:17 GMTCVE