# Hard-coded credentials.

Passwords and keys built into the code, or weak credentials. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [VPS.org one-click Zulip template deployment instance contains multiple vulnerabilities](https://agentprime.io/advisories/CVE-2026-16504.md)
  `CVE-2026-16504` · CVE record: VPS.org Zulip template · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Jul 2026 · Tags: Hard-coded credentials, CWE-1188, CWE-1393
- [HCL iControl is affected by multiple security vulnerabilities.](https://agentprime.io/advisories/CVE-2026-56570.md)
  `CVE-2026-56570` · CVE record: HCL Software HCL iControl · CVSS 3.7 Low · Not analysed yet · Published 31 Jul 2026 · Tags: Hard-coded credentials
- [Use of hard-coded VNC credentials in the engineering-workstation provisioning](https://agentprime.io/advisories/CVE-2026-65313.md)
  `CVE-2026-65313` · CVE record: ANDRITZ HIPASE-250 and 1 more · CVSS 8.1 High · Not analysed yet · Published 31 Jul 2026 · Tags: Hard-coded credentials, CWE-1392
- [Rich Source｜DMS+ (Non-Mobile) - Use of Hard-coded Credentials](https://agentprime.io/advisories/CVE-2026-18452.md)
  `CVE-2026-18452` · CVE record: Rich Source DMS+ (Non-Mobile) · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Jul 2026 · Tags: Hard-coded credentials
- [Hard-coded Cryptographic Key in Watchfire Controllers](https://agentprime.io/advisories/CVE-2026-5846.md)
  `CVE-2026-5846` · CVE record: Watchfire BC550 and 3 more · CVSS 7.6 High · Not analysed yet · Published 30 Jul 2026 · Tags: Hard-coded credentials
- [CVE-2026-15977](https://agentprime.io/advisories/CVE-2026-15977.md)
  `CVE-2026-15977` · CVE record: SGLang SGLang · CVSS 7.5 High · Not analysed yet · Published 30 Jul 2026 · Tags: Hard-coded credentials
- [foreUP customer REST API allows authenticated users to read cleartext payment-processor merchant credentials](https://agentprime.io/advisories/CVE-2026-15657.md)
  `CVE-2026-15657` · CVE record: foreUP foreUP · CVSS 6.5 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: Hard-coded credentials
- [Flyto2 Core: Unauthenticated flyto-verification /run: callback_url SSRF and internal runner-secret exfiltration](https://agentprime.io/advisories/GHSA-jx74-cqjv-2c67.md)
  `GHSA-jx74-cqjv-2c67`, `CVE-2026-67426`, `PYSEC-2026-3571` · PyPI `flyto-core`: affected `>=2.26.6, <2.26.7`, fixed in `2.26.7` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jul 2026 · Tags: Authentication bypass, Hard-coded credentials, Server-side request forgery (SSRF)
- [Flyto2 Core: LLM/API keys leak to an attacker-controlled base_url](https://agentprime.io/advisories/GHSA-qq9q-xgm3-xv9g.md)
  `GHSA-qq9q-xgm3-xv9g`, `CVE-2026-67425`, `PYSEC-2026-3573` · PyPI `flyto-core`: affected `<2.26.7`, fixed in `2.26.7` · CVSS 8.6 High · Not analysed yet · Published 30 Jul 2026 · Tags: Information disclosure, Hard-coded credentials
- [Flyto2 Core: ${env.VAR} interpolation reads any env secret despite env.get being denylisted](https://agentprime.io/advisories/GHSA-hr7p-wg7r-hg9m.md)
  `GHSA-hr7p-wg7r-hg9m`, `CVE-2026-67427`, `PYSEC-2026-3570` · PyPI `flyto-core`: affected `<2.26.7`, fixed in `2.26.7` · CVSS 8.6 High · Not analysed yet · Published 30 Jul 2026 · Tags: Hard-coded credentials, Information disclosure, CWE-693
- [CentreStack < 17.5 Hardcoded Key Token Forgery RCE](https://agentprime.io/advisories/CVE-2026-54363.md)
  `CVE-2026-54363` · CVE record: Gladinet CentreStack · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jul 2026 · Tags: Hard-coded credentials
- [Outstatic CMS <= 2.1.9 contains a hardcoded JWT signing secret.](https://agentprime.io/advisories/CVE-2026-52539.md)
  `CVE-2026-52539` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jul 2026 · Tags: Hard-coded credentials
- [Insufficiently Protected Credentials in GitLab](https://agentprime.io/advisories/CVE-2026-16553.md)
  `CVE-2026-16553` · CVE record: GitLab GitLab · CVSS 5.4 Medium · Not analysed yet · Published 29 Jul 2026 · Tags: Hard-coded credentials
- [Cisco Secure Firewall Management Center Software Static Credential Vulnerability](https://agentprime.io/advisories/CVE-2026-20316.md)
  `CVE-2026-20316` · CVE record: Cisco Cisco Secure Firewall Management Center (FMC) · CVSS 5.3 Medium · Critical (KEV) · In CISA KEV, ransomware · EPSS 0.35 · Not analysed yet · Published 29 Jul 2026 · Tags: Hard-coded credentials
- [swagger-typescript-api vulnerable to authorization-token exfiltration via spec \`$ref\`](https://agentprime.io/advisories/GHSA-h754-fxp7-88wx.md)
  `GHSA-h754-fxp7-88wx`, `CVE-2026-54660` · npm `swagger-typescript-api`: affected `<13.12.2`, fixed in `13.12.2` · CVSS 7.4 High · Not analysed yet · Published 29 Jul 2026 · Tags: Information disclosure, Hard-coded credentials, Server-side request forgery (SSRF)
- [Insufficiently protected credentials in Schneider Electric EcoStruxure™ Cybersecurity Admin Expert](https://agentprime.io/advisories/CVE-2026-14354.md)
  `CVE-2026-14354` · CVE record: Schneider Electric EcoStruxure™ Cybersecurity Admin Expert · CVSS 8.7 High · Not analysed yet · Published 29 Jul 2026 · Tags: Hard-coded credentials
- [Hard-coded AWS IAM credentials vulnerability](https://agentprime.io/advisories/CVE-2026-63239.md)
  `CVE-2026-63239` · CVE record: Three Learning Koollab LMS · CVSS 5.4 Medium · Not analysed yet · Published 29 Jul 2026 · Tags: Hard-coded credentials
- [Due to use of IBM Storage Protect, IBM Cloud Pak System is affected by vulnerability \[\]](https://agentprime.io/advisories/CVE-2026-13463.md)
  `CVE-2026-13463` · CVE record: IBM Cloud Pak System · CVSS 7.5 High · Not analysed yet · Published 28 Jul 2026 · Tags: Hard-coded credentials
- [Hardcoded Credential Vulnerability in Multiple TP-Link Router Models](https://agentprime.io/advisories/CVE-2026-12001.md)
  `CVE-2026-12001` · CVE record: TP-Link Systems Inc. TL-WR850N v3 and 4 more · CVSS 5.2 Medium · Not analysed yet · Published 27 Jul 2026 · Tags: Hard-coded credentials
- [Insufficiently protected credentials in Devolutions Server](https://agentprime.io/advisories/CVE-2026-17569.md)
  `CVE-2026-17569` · CVE record: Devolutions Server · CVSS 4.3 Medium · Not analysed yet · Published 27 Jul 2026 · Tags: Hard-coded credentials
- [Use of Hard-coded Credentials Vulnerability](https://agentprime.io/advisories/CVE-2025-59180.md)
  `CVE-2025-59180` · CVE record: Ericsson Packet Core Controller (PCC) · CVSS 5.1 Medium · Not analysed yet · Published 27 Jul 2026 · Tags: Hard-coded credentials
- [Joomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide secret in SP Page Builder < 6.7.1](https://agentprime.io/advisories/CVE-2026-65879.md)
  `CVE-2026-65879` · CVE record: joomshaper.com SP Page Builder extension for Joomla · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Jul 2026 · Tags: Hard-coded credentials
- [An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273.](https://agentprime.io/advisories/CVE-2021-32087.md)
  `CVE-2021-32087` · CVE record · CVSS 8.8 High · Not analysed yet · Published 27 Jul 2026 · Tags: Hard-coded credentials
- [An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273.](https://agentprime.io/advisories/CVE-2021-32086.md)
  `CVE-2021-32086` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Jul 2026 · Tags: Hard-coded credentials
- [An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273.](https://agentprime.io/advisories/CVE-2021-32085.md)
  `CVE-2021-32085` · CVE record · CVSS 8.8 High · Not analysed yet · Published 27 Jul 2026 · Tags: Hard-coded credentials
- [Loytec LINX firmware: Improper Authentication in PAM configuration](https://agentprime.io/advisories/CVE-2026-12504.md)
  `CVE-2026-12504` · CVE record: Loytec LIP-ME20xC and 4 more · CVSS 8.4 High · Not analysed yet · Published 24 Jul 2026 · Tags: Authentication bypass, Hard-coded credentials
- [Insufficiently protected credentials in OpenStack Ironic Python Agent](https://agentprime.io/advisories/CVE-2026-54422.md)
  `CVE-2026-54422` · CVE record: OpenStack Ironic Python Agent · CVSS 5.5 Medium · Not analysed yet · Published 24 Jul 2026 · Tags: Hard-coded credentials
- [n8n: Shared Credential Header Leak via HTTP Request Pagination Expression](https://agentprime.io/advisories/GHSA-q3j5-8vrg-4p9q.md)
  `GHSA-q3j5-8vrg-4p9q`, `CVE-2026-59209` · npm `n8n`: affected `<1.123.61 || >=2.0.0-rc.0, <2.27.4 || >=2.28.0, <2.28.1`, fixed in `1.123.61`, `2.27.4`, `2.28.1` · CVSS 7.1 High · Not analysed yet · Published 22 Jul 2026 · Tags: Information disclosure, Hard-coded credentials
- [Unauthenticated File Read and Deletion via Hardcoded Encryption Key in RadChart](https://agentprime.io/advisories/CVE-2026-14932.md)
  `CVE-2026-14932` · CVE record: Progress Software Telerik UI for ASP.NET AJAX · CVSS 6.5 Medium · Not analysed yet · Published 22 Jul 2026 · Tags: Hard-coded credentials
- [RadAsyncUpload Default HMAC Key Fallback Vulnerability in Telerik UI for ASP.NET AJAX](https://agentprime.io/advisories/CVE-2026-13184.md)
  `CVE-2026-13184` · CVE record: Progress Software Telerik UI for ASP.NET AJAX · CVSS 7.5 High · Not analysed yet · Published 22 Jul 2026 · Tags: Hard-coded credentials
- [Backdoor Authentication Token](https://agentprime.io/advisories/CVE-2026-8983.md)
  `CVE-2026-8983` · CVE record: Autel MaxiCharger Single · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Jul 2026 · Tags: Hard-coded credentials
- [Hard-coded / Backdoor Accounts](https://agentprime.io/advisories/CVE-2026-8982.md)
  `CVE-2026-8982` · CVE record: Autel MaxiCharger Single · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Jul 2026 · Tags: Hard-coded credentials
- [Credential confusion in @sigstore/oci can leak registry credentials to an attacker-controlled registry](https://agentprime.io/advisories/GHSA-pf56-329r-95rw.md)
  `GHSA-pf56-329r-95rw`, `CVE-2026-59891` · npm `@sigstore/oci`: affected `<0.7.1`, fixed in `0.7.1` · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Jul 2026 · Tags: Hard-coded credentials
- [HCL MyCloud affected by Weak Password Policy](https://agentprime.io/advisories/CVE-2026-56577.md)
  `CVE-2026-56577` · CVE record: HCLSoftware MyCloud · CVSS 3.1 Low · Not analysed yet · Published 21 Jul 2026 · Tags: Hard-coded credentials
- [File Browser: Share API exposes the password hash and bypass token](https://agentprime.io/advisories/GHSA-833g-cqhp-h72j.md)
  `GHSA-833g-cqhp-h72j`, `CVE-2026-62684`, `GO-2026-6025` · Go `github.com/filebrowser/filebrowser/v2`: affected `<2.63.17`, fixed in `2.63.17` · CVSS 2.7 Low · Not analysed yet · Published 20 Jul 2026 · Tags: Information disclosure, Hard-coded credentials
- [LightRAG is Vulnerable to Authentication Bypass: hardcoded DEFAULT_TOKEN_SECRET and public /auth-status defeat LIGHTRAG_API_KEY protection](https://agentprime.io/advisories/GHSA-f4vv-55c2-5789.md)
  `GHSA-f4vv-55c2-5789`, `CVE-2026-61740`, `PYSEC-2026-3475` · PyPI `lightrag-hku`: affected `<1.5.4`, fixed in `1.5.4` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Jul 2026 · Tags: Authentication bypass, Hard-coded credentials
- [Guzzle: Proxy-Authorization headers can be sent to origin servers](https://agentprime.io/advisories/GHSA-94pj-82f3-465w.md)
  `GHSA-94pj-82f3-465w`, `CVE-2026-67339`, `PKSA-pwsk-hy21-4gby` · Packagist `guzzlehttp/guzzle`: affected `<7.14.2`, fixed in `7.14.2` · CVSS 6.9 Medium · Not analysed yet · Published 20 Jul 2026 · Tags: Information disclosure, Hard-coded credentials
- [Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints](https://agentprime.io/advisories/CVE-2026-13446.md)
  `CVE-2026-13446` · CVE record: IBM Langflow OSS · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Jul 2026 · Tags: Hard-coded credentials
- [Keycloak-services: keycloak-services: authenticator config endpoint exposes raw recaptcha secrets to view-only admins](https://agentprime.io/advisories/CVE-2026-16104.md)
  `CVE-2026-16104` · CVE record: Red Hat Red Hat build of Keycloak 26.6 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 17 Jul 2026 · Tags: Hard-coded credentials, CWE-212
- [clawvet < 0.7.5 Hard-coded JWT Secret Session Forgery](https://agentprime.io/advisories/CVE-2026-62241.md)
  `CVE-2026-62241` · CVE record: MohibShaikh clawvet · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Jul 2026 · Tags: Authentication bypass, Hard-coded credentials
- [OpenClaw < 2026.5.28 Bot Framework SSRF via serviceUrl Parameter Validation](https://agentprime.io/advisories/CVE-2026-62214.md)
  `CVE-2026-62214` · CVE record: openclaw msteams · CVSS 6.0 Medium · Not analysed yet · Published 17 Jul 2026 · Tags: Hard-coded credentials
- [OpenClaw < 2026.5.27 Token Leakage via MS Teams Outbound Requests](https://agentprime.io/advisories/CVE-2026-62213.md)
  `CVE-2026-62213` · CVE record: openclaw msteams · CVSS 6.0 Medium · Not analysed yet · Published 17 Jul 2026 · Tags: Hard-coded credentials
- [Pheditor: Hardcoded default password 'admin' with no forced change enables full application compromise](https://agentprime.io/advisories/GHSA-p4h7-p9rj-2pq2.md)
  `GHSA-p4h7-p9rj-2pq2`, `CVE-2026-55579`, `PKSA-fw3p-jbcz-gm98` · Packagist `pheditor/pheditor`: affected `>=2.0.1, <2.0.6`, fixed in `2.0.6` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jul 2026 · Tags: Hard-coded credentials
- [HireFlow: Use of Hard-coded Credentials](https://agentprime.io/advisories/CVE-2026-45336.md)
  `CVE-2026-45336` · CVE record: StratonWebDesigners HireFlow · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jul 2026 · Tags: Hard-coded credentials
- [An issue in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042 allows a remote attacker to obtain sensitive information via the community string component.](https://agentprime.io/advisories/CVE-2024-32387.md)
  `CVE-2024-32387` · CVE record · CVSS 5.7 Medium · Not analysed yet · Published 16 Jul 2026 · Tags: Information disclosure, Hard-coded credentials
- [FastGPT: Unauthenticated cross-tenant data access via forgeable plugin-invoke JWT (default INVOKE_TOKEN_SECRET='token')](https://agentprime.io/advisories/CVE-2026-61684.md)
  `CVE-2026-61684` · CVE record: labring FastGPT · CVSS 8.8 High · Not analysed yet · Published 15 Jul 2026 · Tags: Hard-coded credentials
- [Credential exposure in ICU Scandinavia Boomerang](https://agentprime.io/advisories/CVE-2026-46458.md)
  `CVE-2026-46458` · CVE record: ICU Scandinavia Boomerang · CVSS 7.1 High · Not analysed yet · Published 15 Jul 2026 · Tags: Hard-coded credentials
- [Hardcoded Cryptographic Key Information Disclosure Vulnerability on TP-Link Kasa EC70 and EC71](https://agentprime.io/advisories/CVE-2026-9770.md)
  `CVE-2026-9770` · CVE record: TP-Link Systems Inc. Kasa EC71 v4 and 1 more · CVSS 8.6 High · Not analysed yet · Published 15 Jul 2026 · Tags: Hard-coded credentials
- [CAI Content Credentials | Insufficiently Protected Credentials (CWE-522)](https://agentprime.io/advisories/CVE-2026-48295.md)
  `CVE-2026-48295` · CVE record: Adobe Content Credentials Rust SDK and 2 more · CVSS 7.5 High · Not analysed yet · Published 14 Jul 2026 · Tags: Hard-coded credentials
- [nebula-mesh: Operator session tokens stored in plaintext in the database](https://agentprime.io/advisories/GHSA-q4vm-pq3q-8wgq.md)
  `GHSA-q4vm-pq3q-8wgq`, `CVE-2026-53603`, `GO-2026-5991` · Go `github.com/forgekeep/nebula-mesh`: affected `<0.3.8`, fixed in `0.3.8` · CVSS 7.1 High · Not analysed yet · Published 14 Jul 2026 · Tags: Information disclosure, Hard-coded credentials
- [GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-47282.md)
  `CVE-2026-47282` · CVE record: Microsoft Visual Studio Code · CVSS 6.5 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Information disclosure, Hard-coded credentials
- [Excon does not redact additional sensitive/risky headers when following redirects](https://agentprime.io/advisories/GHSA-48rx-c7pg-q66r.md)
  `GHSA-48rx-c7pg-q66r`, `CVE-2026-54171` · RubyGems `excon`: affected `<1.5.0`, fixed in `1.5.0` · CVSS 6.5 Medium · Not analysed yet · Published 10 Jul 2026 · Tags: Information disclosure, Hard-coded credentials
- [Insufficiently Protected Credentials in GitLab](https://agentprime.io/advisories/CVE-2026-11827.md)
  `CVE-2026-11827` · CVE record: GitLab GitLab · CVSS 4.9 Medium · Not analysed yet · Published 8 Jul 2026 · Tags: Hard-coded credentials
- [Insufficiently protected credentials in Webpros Plesk](https://agentprime.io/advisories/CVE-2026-56843.md)
  `CVE-2026-56843` · CVE record: Webpros Plesk · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Jul 2026 · Tags: Hard-coded credentials
- [DataEase: Hardcoded JWT Signing Secret in ShareLink](https://agentprime.io/advisories/CVE-2026-57172.md)
  `CVE-2026-57172` · CVE record: dataease dataease · CVSS 8.3 High · Not analysed yet · Published 7 Jul 2026 · Tags: Hard-coded credentials
- [HTTP::Tiny versions before 0.095 for Perl forward credential headers to cross-origin redirect targets](https://agentprime.io/advisories/CVE-2026-7017.md)
  `CVE-2026-7017` · CVE record: HAARG HTTP::Tiny · CVSS 7.1 High · Not analysed yet · Published 7 Jul 2026 · Tags: Hard-coded credentials
- [Trueview Security camera T18161- AF v4.9.60.0 contains an authentication bypass vulnerability caused by improper password validation and the presence of hard-coded credentials in the firmware.](https://agentprime.io/advisories/CVE-2026-37270.md)
  `CVE-2026-37270` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Jul 2026 · Tags: Authentication bypass, Hard-coded credentials
- [9router has unauthenticated CRUD on /api/providers and Full API Key Leak via /api/usage/stats](https://agentprime.io/advisories/GHSA-vjc7-jrh9-9j86.md)
  `GHSA-vjc7-jrh9-9j86`, `CVE-2026-59801`, `CVE-2026-62327`, `CVE-2026-62328` · npm `9router`: affected `<=0.4.41`, no fixed version yet · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Jul 2026 · Tags: Information disclosure, Authentication bypass, Hard-coded credentials, Broken access control
- [Coder's session token leaked to arbitrary hosts via \`coder open app\` for external workspace apps](https://agentprime.io/advisories/GHSA-v54h-cp2w-9x4g.md)
  `GHSA-v54h-cp2w-9x4g`, `CVE-2026-55431`, `GO-2026-5924` · Go `github.com/coder/coder/v2`: affected `<2.29.17 || >=2.30.0, <2.32.7 || >=2.33.0, <2.33.8 || >=2.34.0, <2.34.2`, fixed in `2.29.17`, `2.32.7`, `2.33.8`, `2.34.2` · CVSS 7.7 High · Not analysed yet · Published 6 Jul 2026 · Tags: Hard-coded credentials, Open redirect
- [uniFLOW Universal Login Manager (ULM) Standalone Improper Protection of Sensitive Information Leads to Information Disclosure](https://agentprime.io/advisories/CVE-2026-1433.md)
  `CVE-2026-1433` · CVE record: NT-ware uniFLOW ULM (Universal Login Manager) Standalone · CVSS 4.8 Medium · Not analysed yet · Published 6 Jul 2026 · Tags: Hard-coded credentials

Newest: <https://agentprime.io/advisories/tag/hard-coded-credentials.md>
Older: <https://agentprime.io/advisories/tag/hard-coded-credentials.md?cursor=WyIyMDI2LTA3LTA2VDA4OjEyOjQ5LjU3MTAwMFoiLCJDVkUtMjAyNi0xNDMzIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=hard-coded-credentials&cursor=WyIyMDI2LTA3LTMxVDE1OjU5OjQ3Ljg0MTAwMFoiLCJDVkUtMjAyNi0xNzM0OSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/hard-coded-credentials/?cursor=WyIyMDI2LTA3LTMxVDE1OjU5OjQ3Ljg0MTAwMFoiLCJDVkUtMjAyNi0xNzM0OSJd>. Everything for agents: <https://agentprime.io/llms.txt>.