agentprime: CWE-320

CVE-2014-125135: OctoPrint Flask Secret Key hard-coded key

Mon, 26 Oct 2026 19:00:19 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-113466: MinIO Embedded Console common-main.go SessionTokenAuthenticate hard-coded key

Tue, 20 Oct 2026 14:45:12 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-108798: ZKTeco BioTime hard-coded key

Mon, 12 Oct 2026 04:00:12 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-105392: Lybbn Django-Vue-Lyadmin JWT Signing settings.py hard-coded key

Mon, 05 Oct 2026 19:45:12 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-102241: Netcore NAP930 Backup/Restore backup_common.sh hard-coded key

Tue, 29 Sep 2026 02:15:07 GMT

CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-90510: dromara orion-visor HostKeyServiceImpl.java HostKeyServiceImpl.encryptKey hard-coded key

Sun, 13 Sep 2026 10:15:08 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-86241: liufee FeehiCMS Cookie Validation main-local.php hard-coded key

Mon, 07 Sep 2026 01:15:08 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-56254: capacitor-updater - End-to-End Encryption Bypass via Private Key Distribution

Fri, 10 Jul 2026 13:57:52 GMT

CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-11505: GL.iNet XE3000 glnassys hard-coded key

Mon, 08 Jun 2026 10:15:09 GMT

CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-8739: Sanluan PublicCMS SafeConfigComponent.java getSignKey hard-coded key

Sun, 17 May 2026 07:45:12 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-8243: Industrial Application Software IAS Canias ERP JNLP Deployment Endpoint hard-coded key

Sun, 10 May 2026 09:00:12 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-7306: Xuxueli xxl-job OpenAPI Endpoint OpenApiController.java hard-coded key

Tue, 28 Apr 2026 19:30:13 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-7018: Datavane Datavines JWT Token TokenManager.java hard-coded key

Sun, 26 Apr 2026 03:30:20 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-6611: liangliangyy DjangoBlog File Upload Endpoint settings.py hard-coded key

Mon, 20 Apr 2026 06:00:18 GMT

CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-6580: liangliangyy DjangoBlog Amap API Call views.py hard-coded key

Sun, 19 Apr 2026 22:15:12 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-5622: hcengineering Huly Platform JWT Token token.ts hard-coded key

Mon, 06 Apr 2026 04:30:13 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-5549: Tenda AC10 RSA 2048-bit Private Key privkeySrv.pem hard-coded key

Sun, 05 Apr 2026 07:45:14 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-5527: Tenda 4G03 Pro ECDSA P-256 Private Key server.key hard-coded key

Sat, 04 Apr 2026 23:15:12 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-5471: Investory Toy Planet Trouble App app.investory.toyfactory google-services-desktop.json hard-coded key

Fri, 03 Apr 2026 15:45:10 GMT

CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-5462: Wahoo Fitness SYSTM App com.WahooFitness.SYSTM BuildConfig.java hard-coded key

Fri, 03 Apr 2026 07:15:10 GMT

CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-5458: Noelse Individuals & Pro App com.afone.noelse BuildConfig.java hard-coded key

Fri, 03 Apr 2026 07:00:16 GMT

CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-5457: PropertyGuru AgentNet Singapore App com.allproperty.android.agentnet BuildConfig.java hard-coded key

Fri, 03 Apr 2026 06:30:13 GMT

CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-5456: Align Technology My Invisalign App com.aligntech.myinvisalign.emea BuildConfig.java hard-coded key

Fri, 03 Apr 2026 06:15:12 GMT

CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-5455: Dialogue App ca.diagram.dialogue config.json hard-coded key

Fri, 03 Apr 2026 06:00:20 GMT

CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-5454: GRID Organiser App co.gridapp.organiser app.json hard-coded key

Fri, 03 Apr 2026 04:45:10 GMT

CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-5453: Rico só vantagem pra investir App br.com.rico.mobile SegmentSettingsModule.java hard-coded key

Fri, 03 Apr 2026 04:30:11 GMT

CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-5452: UCC CampusConnect App campusconnect.ucc BuildConfig.java hard-coded key

Fri, 03 Apr 2026 02:45:09 GMT

CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-5420: Shinrays Games Goods Triple App cats.goods.sort.sorting.games jRwTX.java hard-coded key

Thu, 02 Apr 2026 19:00:17 GMT

CVSS 2.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-5310: Enter Software Iperius Backup IperiusAccounts.ini hard-coded key

Wed, 01 Apr 2026 16:30:21 GMT

CVSS 2.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-4588: kalcaddle kodbox Site-level API key shareOut.class.php shareSafeGroup hard-coded key

Mon, 23 Mar 2026 12:46:51 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-4477: Yi Technology YI Home Camera WPA/WPS hard-coded key

Fri, 20 Mar 2026 07:02:10 GMT

CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-3963: perfree go-fastdfs-web Apache Shiro RememberMe ShiroConfig.java rememberMeManager hard-coded key

Wed, 11 Mar 2026 23:02:08 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

OpenClaw reuses the gateway auth token in the owner ID prompt hashing fallback

Tue, 03 Mar 2026 23:01:30 GMT

openclaw <2026.2.22, fixed in 2026.2.22. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

SQLE's JWT Secret Handler can be manipulated to use hard-coded cryptographic key in github.com/actiontech/sqle

Mon, 12 Jan 2026 17:39:39 GMT

github.com/actiontech/sqle *, no fixed version yet. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-15108: PandaXGO PandaX JWT Secret config.yml hard-coded key

Sat, 27 Dec 2025 16:32:05 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-15105: getmaxun auth.ts hard-coded key

Sat, 27 Dec 2025 09:02:06 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-15005: CouchCMS reCAPTCHA config.example.php hard-coded key

Mon, 22 Dec 2025 00:32:07 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-14651: MartialBE one-hub docker-compose.yml hard-coded key

Sun, 14 Dec 2025 08:32:06 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-40593: Fortinet FortiAnalyzer: A key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2…

Thu, 11 Dec 2025 14:10:08 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Authentication Bypass via Default JWT Secret in NocoBase docker-compose Deployments

Tue, 09 Dec 2025 17:42:53 GMT

@nocobase/auth <1.9.0-beta.18 || >=1.9.0, <1.9.23 || >=2.0.0-alpha.1, <2.0.0-alpha.52, fixed in 1.9.0-beta.18, 1.9.23, 2.0.0-alpha.52. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-13948: opsre go-ldap-admin JWT docker-compose.yaml hard-coded key

Wed, 03 Dec 2025 14:32:07 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-6666: motogadget mo.lock Ignition Lock NFC hard-coded key

Sat, 29 Nov 2025 09:02:08 GMT

CVSS 1.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-12615: PHPGurukul News Portal settings.py hard-coded key

Mon, 03 Nov 2025 03:32:06 GMT

CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-11609: code-projects Hospital Management System express-session hard-coded key

Sat, 11 Oct 2025 17:32:05 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-11290: CRMEB JWT HMAC Secret hard-coded key

Sun, 05 Oct 2025 11:32:04 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-10250: DJI Mavic Spark/Mavic Air/Mavic Mini Telemetry Channel hard-coded key

Thu, 11 Sep 2025 11:32:06 GMT

CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-10080: running-elephant Datart API AESUtil.java getTokensecret hard-coded key

Mon, 08 Sep 2025 03:02:06 GMT

CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-9604: coze-studio aes.go hard-coded key

Fri, 29 Aug 2025 01:32:09 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-8759: TRENDnet TN-200 Lighttpd hard-coded key

Sat, 09 Aug 2025 17:02:05 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-6669: gooaclok819 sublinkX jwt.go hard-coded key

Wed, 25 Jun 2025 22:31:07 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.