# Hard-coded credentials.

Passwords and keys built into the code, or weak credentials. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [An issue in Trueview T18061 WiFi 3MP Robot Pan-Tilt Security Camera Version 1.0 allows a physically proximate attacker to escalate privileges via the RSA private key component](https://agentprime.io/advisories/CVE-2026-51977.md)
  `CVE-2026-51977` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Aug 2026 · Tags: Hard-coded credentials
- [LB-LINK X-PRO easycwmp hard-coded credentials](https://agentprime.io/advisories/CVE-2026-19901.md)
  `CVE-2026-19901` · CVE record: LB-LINK X-PRO · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Aug 2026 · Tags: Hard-coded credentials
- [LB-LINK X-PRO shadow hard-coded credentials](https://agentprime.io/advisories/CVE-2026-19900.md)
  `CVE-2026-19900` · CVE record: LB-LINK X-PRO · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Aug 2026 · Tags: Hard-coded credentials
- [Airwall - Hardcoded Secrets](https://agentprime.io/advisories/CVE-2026-64887.md)
  `CVE-2026-64887` · CVE record: Johnson Controls Airwall · CVSS 7.0 High · Not analysed yet · Published 14 Aug 2026 · Tags: Hard-coded credentials
- [Emlog: Missing CSRF protection in AI Assistant execute_tool leads to full database compromise and admin account takeover](https://agentprime.io/advisories/CVE-2026-73847.md)
  `CVE-2026-73847` · CVE record: emlog emlog · CVSS 6.8 Medium · Not analysed yet · Published 14 Aug 2026 · Tags: Cross-site request forgery (CSRF), Hard-coded credentials, CWE-1275
- [Hard-coded credentials in Dell Wyse Management Suite (WMS)](https://agentprime.io/advisories/CVE-2026-63702.md)
  `CVE-2026-63702` · CVE record: Dell Wyse Management Suite (WMS) · CVSS 6.3 Medium · Not analysed yet · Published 14 Aug 2026 · Tags: Hard-coded credentials
- [Use of hard-coded credentials in Prospero Flow CRM employee onboarding](https://agentprime.io/advisories/CVE-2026-19871.md)
  `CVE-2026-19871` · CVE record: Roskus Prospero Flow CRM · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Aug 2026 · Tags: Hard-coded credentials
- [Budibase before 3.40.0 Credential Exposure via STRING Fields](https://agentprime.io/advisories/CVE-2026-72857.md)
  `CVE-2026-72857` · CVE record: Budibase budibase · CVSS 8.3 High · Not analysed yet · Published 13 Aug 2026 · Tags: Hard-coded credentials
- [Tenda CH/CP/TX3 SSH hard-coded password](https://agentprime.io/advisories/CVE-2026-19750.md)
  `CVE-2026-19750` · CVE record: Tenda CH and 2 more · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2026 · Tags: Hard-coded credentials, CWE-255
- [IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution](https://agentprime.io/advisories/CVE-2026-17468.md)
  `CVE-2026-17468` · CVE record: IBM Documentation Offline · CVSS 5.3 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Hard-coded credentials
- [The following vulnerabilities that can affect IBM Storage Scale and the Management GUI are now fixed in 5.2.3.9 or higher and 6.0.1.1 or higher](https://agentprime.io/advisories/CVE-2026-13460.md)
  `CVE-2026-13460` · CVE record: IBM Storage Scale · CVSS 7.5 High · Not analysed yet · Published 13 Aug 2026 · Tags: Hard-coded credentials
- [Flow Neuroscience FL-100 Use of Hard-coded Credentials](https://agentprime.io/advisories/CVE-2026-18164.md)
  `CVE-2026-18164` · CVE record: Flow Neuroscience FL-100 and 1 more · CVSS 7.2 High · Not analysed yet · Published 13 Aug 2026 · Tags: Hard-coded credentials
- [CyberPanel < 3.0.0 Hard-coded JWT Secret Authentication Bypass via WebTerminal](https://agentprime.io/advisories/CVE-2026-67614.md)
  `CVE-2026-67614` · CVE record: usmannasir cyberpanel · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2026 · Tags: Hard-coded credentials
- [Hard-coded cryptographic key in Lenovo Accessories and Display Manager](https://agentprime.io/advisories/CVE-2026-63423.md)
  `CVE-2026-63423` · CVE record: Lenovo Accessories and Display Manager · CVSS 8.5 High · Not analysed yet · Published 13 Aug 2026 · Tags: Hard-coded credentials
- [SMP security request](https://agentprime.io/advisories/CVE-2026-19293.md)
  `CVE-2026-19293` · CVE record: silabs.com WiseConnect · CVSS 8.8 High · Not analysed yet · Published 13 Aug 2026 · Tags: Hard-coded credentials
- [Priority – CWE-798: Use of Hard-coded Credentials CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-284: Improper Access Control](https://agentprime.io/advisories/CVE-2026-59507.md)
  `CVE-2026-59507` · CVE record: Priority Portal Generator addon to Priority ERP (developed by Soft Solutions) · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2026 · Tags: Hard-coded credentials
- [Prisma Browser: Sensitive Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-0290.md)
  `CVE-2026-0290` · CVE record: Palo Alto Networks Prisma Browser · CVSS 0.5 Low · Not analysed yet · Published 13 Aug 2026 · Tags: Hard-coded credentials
- [Prisma Browser: Inappropriate Implementation in Account Protection](https://agentprime.io/advisories/CVE-2026-0289.md)
  `CVE-2026-0289` · CVE record: Palo Alto Networks Prisma Browser · CVSS 0.5 Low · Not analysed yet · Published 13 Aug 2026 · Tags: Hard-coded credentials
- [Duplicate Advisory: Encrypted-notebook key-derivation material and wrapped notebook keys disclosed to anonymous readers, enabling offline master-password cracking](https://agentprime.io/advisories/GHSA-hr3f-qfrh-h7w5.md)
  `GHSA-hr3f-qfrh-h7w5` · Go `github.com/siyuan-note/siyuan/kernel`: affected `<=3.7.2`, no fixed version yet · CVSS 7.5 High · Withdrawn · Not analysed yet · Published 12 Aug 2026 · Tags: Hard-coded credentials
- [Duplicate Advisory: The session-cookie signing key (Conf.CookieKey) is returned to anonymous readers by /api/system/getConf](https://agentprime.io/advisories/GHSA-hg4j-w33m-p7g4.md)
  `GHSA-hg4j-w33m-p7g4` · Go `github.com/siyuan-note/siyuan/kernel`: affected `<=3.7.2`, no fixed version yet · CVSS 8.6 High · Withdrawn · Not analysed yet · Published 12 Aug 2026 · Tags: Hard-coded credentials
- [Duplicate Advisory: Non-administrator responses from /api/system/getConf omit three secrets that the configuration-export path explicitly strips, disclosing the session-cookie signing key and the OS username to anonymous readers](https://agentprime.io/advisories/GHSA-2qqv-3jgq-vpm9.md)
  `GHSA-2qqv-3jgq-vpm9` · Go `github.com/siyuan-note/siyuan/kernel`: affected `<=3.7.3`, no fixed version yet · CVSS 8.6 High · Withdrawn · Not analysed yet · Published 12 Aug 2026 · Tags: Hard-coded credentials
- [WolfStack < 25.9.2 Hard-coded Secret Authentication Bypass via X-WolfStack-Secret](https://agentprime.io/advisories/CVE-2026-73519.md)
  `CVE-2026-73519` · CVE record: wolfsoftwaresystemsltd WolfStack · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Aug 2026 · Tags: Hard-coded credentials
- [IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities](https://agentprime.io/advisories/CVE-2026-14866.md)
  `CVE-2026-14866` · CVE record: IBM i Access Client Solutions · CVSS 7.7 High · Not analysed yet · Published 12 Aug 2026 · Tags: Hard-coded credentials
- [Mira Hormone Monitor, Mira Android App Use of Hard-coded Credentials](https://agentprime.io/advisories/CVE-2026-67568.md)
  `CVE-2026-67568` · CVE record: Quanovate Tech Inc. (operating as Mira / Mira Care) Mira Firmware and 1 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Aug 2026 · Tags: Hard-coded credentials
- [MaxKey Hard-coded JWT Secret Unauthorized Access via /login/jwt/trust](https://agentprime.io/advisories/CVE-2026-69102.md)
  `CVE-2026-69102` · CVE record: dromara MaxKey · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Aug 2026 · Tags: Hard-coded credentials
- [Microsoft SharePoint Server Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-62839.md)
  `CVE-2026-62839` · CVE record: Microsoft Microsoft SharePoint Enterprise Server 2016 and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Hard-coded credentials
- [Microsoft Outlook Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-62882.md)
  `CVE-2026-62882` · CVE record: Microsoft Microsoft 365 Apps for Enterprise and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Hard-coded credentials
- [ColdFusion | Use of Hard-coded Cryptographic Key (CWE-321)](https://agentprime.io/advisories/CVE-2026-34635.md)
  `CVE-2026-34635` · CVE record: Adobe ColdFusion 2025 and 1 more · CVSS 8.4 High · Not analysed yet · Published 11 Aug 2026 · Tags: Hard-coded credentials
- [Hard-coded cryptographic key in Siemens LOGO! Soft Comfort](https://agentprime.io/advisories/CVE-2026-57262.md)
  `CVE-2026-57262` · CVE record: Siemens LOGO! Soft Comfort · CVSS 7.0 High · Not analysed yet · Published 11 Aug 2026 · Tags: Hard-coded credentials
- [Credentials disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Server)](https://agentprime.io/advisories/CVE-2026-66763.md)
  `CVE-2026-66763` · CVE record: SAP_SE SAP BusinessObjects Business Intelligence Platform (Central Management Server) · CVSS 7.9 High · Not analysed yet · Published 11 Aug 2026 · Tags: Hard-coded credentials
- [Hard-coded Credentials in SAP Advanced Planning and Optimization (Model Mix Planning)](https://agentprime.io/advisories/CVE-2026-58245.md)
  `CVE-2026-58245` · CVE record: SAP_SE SAP Advanced Planning and Optimization (Model Mix Planning) · CVSS 3.8 Low · Not analysed yet · Published 11 Aug 2026 · Tags: Hard-coded credentials
- [Sensitive Data Exposure due to Hardcoded Cryptographic Keys in Multiple TP-Link Aginet Devices](https://agentprime.io/advisories/CVE-2025-30239.md)
  `CVE-2025-30239` · CVE record: TP-Link Systems Inc. HB810(US2) V1.0/1.6/2.0/2.6 and 4 more · CVSS 8.5 High · Not analysed yet · Published 10 Aug 2026 · Tags: Hard-coded credentials
- [Backdoor / default root credentials](https://agentprime.io/advisories/CVE-2025-13293.md)
  `CVE-2025-13293` · CVE record: TBEA TBEA TLogger (TBEA Communication Box 3rd Generation) · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Aug 2026 · Tags: Hard-coded credentials
- [Multicluster-global-hub: multicluster-global-hub: spec-topic read acl leaks bootstrap kubeconfigs to all managed hubs during migration](https://agentprime.io/advisories/CVE-2026-71577.md)
  `CVE-2026-71577` · CVE record: Red Hat Multicluster Global Hub 1.4.9 and 4 more · CVSS 6.3 Medium · Not analysed yet · Published 10 Aug 2026 · Tags: Hard-coded credentials
- [Exposure of Sensitive Information to an Unauthorized Actor in Zyxel's WAH7601](https://agentprime.io/advisories/CVE-2026-12984.md)
  `CVE-2026-12984` · CVE record: Zyxel Networks WAH7601 · CVSS 8.2 High · Not analysed yet · Published 10 Aug 2026 · Tags: Hard-coded credentials
- [Hardcoded Credentials in Zyxel WAH7601 Router](https://agentprime.io/advisories/CVE-2026-6374.md)
  `CVE-2026-6374` · CVE record: Zyxel Networks WAH7601 · CVSS 7.3 High · Not analysed yet · Published 10 Aug 2026 · Tags: Hard-coded credentials
- [Weak credentials in ECOVACS ROBOTICS DEEBOT PRO M1 and others](https://agentprime.io/advisories/CVE-2026-66409.md)
  `CVE-2026-66409` · CVE record: ECOVACS ROBOTICS DEEBOT PRO M1 and 1 more · CVSS 6.9 Medium · Not analysed yet · Published 10 Aug 2026 · Tags: Hard-coded credentials
- [Weak credentials in ECOVACS ROBOTICS DEEBOT PRO M1 and others](https://agentprime.io/advisories/CVE-2026-66408.md)
  `CVE-2026-66408` · CVE record: ECOVACS ROBOTICS DEEBOT PRO M1 and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 10 Aug 2026 · Tags: Hard-coded credentials
- [Pathling $bulk-submit allows bearer-token exfiltration and persistent warehouse poisoning via unvalidated manifest output URLs](https://agentprime.io/advisories/CVE-2026-47662.md)
  `CVE-2026-47662` · CVE record: aehrc pathling · CVSS 8.7 High · Not analysed yet · Published 7 Aug 2026 · Tags: Hard-coded credentials, Server-side request forgery (SSRF), CWE-20
- [Pathling: Explicit oauthMetadataUrl in bulk-submit allows OAuth client credential exfiltration](https://agentprime.io/advisories/CVE-2026-47660.md)
  `CVE-2026-47660` · CVE record: aehrc pathling · CVSS 8.7 High · Not analysed yet · Published 7 Aug 2026 · Tags: Hard-coded credentials, Server-side request forgery (SSRF)
- [TeamDavid: Weak Cryptography and Insecure Password Storage](https://agentprime.io/advisories/CVE-2026-54218.md)
  `CVE-2026-54218` · CVE record: Tobit Laboratories AG TeamDavid · CVSS 8.8 High · Not analysed yet · Published 7 Aug 2026 · Tags: Hard-coded credentials
- [Integrity‑check credential leakage vulnerability in an application function of ZTE F689 product](https://agentprime.io/advisories/CVE-2026-49008.md)
  `CVE-2026-49008` · CVE record: ZTE F689 · CVSS 6.5 Medium · Not analysed yet · Published 7 Aug 2026 · Tags: Hard-coded credentials
- [Information leakage vulnerability in ZTE F689 product](https://agentprime.io/advisories/CVE-2026-49007.md)
  `CVE-2026-49007` · CVE record: ZTE F689 · CVSS 7.5 High · Not analysed yet · Published 7 Aug 2026 · Tags: Hard-coded credentials
- [TLS credential leakage vulnerability in ZTE F689 product](https://agentprime.io/advisories/CVE-2026-49006.md)
  `CVE-2026-49006` · CVE record: ZTE F689 · CVSS 5.3 Medium · Not analysed yet · Published 7 Aug 2026 · Tags: Hard-coded credentials
- [rclone: S3 backend does not strip X-Amz-Security-Token on a same-host HTTPS->HTTP redirect](https://agentprime.io/advisories/GHSA-gx4c-2hqx-cw2r.md)
  `GHSA-gx4c-2hqx-cw2r`, `BIT-rclone-2026-79782`, `CVE-2026-79782`, `GO-2026-6196` · Go `github.com/rclone/rclone`: affected `<1.74.4`, fixed in `1.74.4` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Aug 2026 · Tags: Weak cryptography or TLS, Hard-coded credentials
- [rclone: WebDAV Credentials Survive a Same-Host HTTPS-to-HTTP Redirect](https://agentprime.io/advisories/GHSA-h4mf-4v27-hggj.md)
  `GHSA-h4mf-4v27-hggj`, `BIT-rclone-2026-79779`, `CVE-2026-79779`, `GO-2026-6197` · Go `github.com/rclone/rclone`: affected `<1.75.0`, fixed in `1.75.0` · CVSS 6.0 Medium · Not analysed yet · Published 5 Aug 2026 · Tags: Weak cryptography or TLS, Hard-coded credentials
- [rclone: S3 Redirect Sanitization Omits IBM IAM Bearer Tokens and SSE-C Keys](https://agentprime.io/advisories/GHSA-8mxv-9xhp-86h4.md)
  `GHSA-8mxv-9xhp-86h4`, `BIT-rclone-2026-79780`, `CVE-2026-79780`, `GO-2026-6188` · Go `github.com/rclone/rclone`: affected `<1.75.0`, fixed in `1.75.0` · CVSS 6.0 Medium · Not analysed yet · Published 5 Aug 2026 · Tags: Information disclosure, Weak cryptography or TLS, Hard-coded credentials
- [Use of hard-coded cryptographic key in Acrisure KARR BT and DR-100](https://agentprime.io/advisories/CVE-2026-18411.md)
  `CVE-2026-18411` · CVE record: Acrisure KARR BT and 1 more · CVSS 7.2 High · Not analysed yet · Published 5 Aug 2026 · Tags: Hard-coded credentials
- [HCL Digital Experience and Digital Experience Compose insufficiently protects credentials](https://agentprime.io/advisories/CVE-2026-21766.md)
  `CVE-2026-21766` · CVE record: HCLSoftware HCL Digital Experience and Digital Experience Compose · CVSS 5.4 Medium · Not analysed yet · Published 5 Aug 2026 · Tags: Hard-coded credentials, Information disclosure
- [Statamic CMS exposes two-factor recovery codes through dynamic Antlers rendering](https://agentprime.io/advisories/GHSA-jppw-r5j3-xf7x.md)
  `GHSA-jppw-r5j3-xf7x`, `CVE-2026-71293`, `PKSA-rsd9-mj5m-pj4f` · Packagist `statamic/cms`: affected `>=6.0.0-alpha.1, <=6.30.0`, no fixed version yet · CVSS 6.2 Medium · Not analysed yet · Published 5 Aug 2026 · Tags: Information disclosure, Hard-coded credentials
- [ESPHome web_server Plaintext Password Disclosure via JSON "value" Field](https://agentprime.io/advisories/CVE-2026-71260.md)
  `CVE-2026-71260` · CVE record: esphome esphome · CVSS 6.5 Medium · Not analysed yet · Published 5 Aug 2026 · Tags: Hard-coded credentials
- [DjangoCRM - Hardcoded Django SECRET_KEY Enables Session and CSRF Token Forgery](https://agentprime.io/advisories/CVE-2026-71238.md)
  `CVE-2026-71238` · CVE record: DjangoCRM django-crm · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Aug 2026 · Tags: Hard-coded credentials
- [My Safetipin Android Application 5.2.1 contains Hardcoded credentials in the authentication module, which allows remote attackers to bypass authentication and gain unauthorized access to user account…](https://agentprime.io/advisories/CVE-2025-63823.md)
  `CVE-2025-63823` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Aug 2026 · Tags: Hard-coded credentials
- [Hardcoded Cryptographic Key in Bilin Software's HUMANIST Digital Human Resources](https://agentprime.io/advisories/CVE-2026-14804.md)
  `CVE-2026-14804` · CVE record: Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Aug 2026 · Tags: Hard-coded credentials
- [Hardcoded Cryptographic Key on GV-AS1620 Controller Firmware (GV-Cloud)](https://agentprime.io/advisories/CVE-2026-18754.md)
  `CVE-2026-18754` · CVE record: GeoVision Inc. GV-AS1620 (GV-Cloud) · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Aug 2026 · Tags: Hard-coded credentials
- [Hardcoded Cryptographic Key on GV-AS1620 Controller Firmware (GV-ASManager)](https://agentprime.io/advisories/CVE-2026-18753.md)
  `CVE-2026-18753` · CVE record: GeoVision Inc. GV-AS1620 (AS-Manager) · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Aug 2026 · Tags: Hard-coded credentials
- [Hardcoded Certificates in TP-Link Omada Device Communications](https://agentprime.io/advisories/CVE-2025-15628.md)
  `CVE-2025-15628` · CVE record: TP-Link Systems Inc. Omada Gateways and 4 more · CVSS 8.2 High · Not analysed yet · Published 3 Aug 2026 · Tags: Hard-coded credentials
- [Hardcoded Cryptographic Keys in TP-Link Omada Adoption Protocol Authentication](https://agentprime.io/advisories/CVE-2025-15627.md)
  `CVE-2025-15627` · CVE record: TP-Link Systems Inc. Omada Gateways and 3 more · CVSS 6.9 Medium · Not analysed yet · Published 3 Aug 2026 · Tags: Hard-coded credentials
- [Wings exposes node configuration secrets through egg configuration-file templating](https://agentprime.io/advisories/GHSA-pfvc-3p5h-x7h6.md)
  `GHSA-pfvc-3p5h-x7h6`, `CVE-2026-52855`, `GO-2026-6158` · Go `github.com/pterodactyl/wings`: affected `<1.12.3`, fixed in `1.12.3` · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Jul 2026 · Tags: Information disclosure, Hard-coded credentials
- [pgAdmin 4: Adhoc server clone leaks another user's stored database credentials and ownership to a non-owner](https://agentprime.io/advisories/CVE-2026-17349.md)
  `CVE-2026-17349` · CVE record: pgadmin.org pgAdmin 4 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Jul 2026 · Tags: Hard-coded credentials, Broken access control

Newest: <https://agentprime.io/advisories/tag/hard-coded-credentials.md>
Older: <https://agentprime.io/advisories/tag/hard-coded-credentials.md?cursor=WyIyMDI2LTA3LTMxVDE1OjU5OjQ3Ljg0MTAwMFoiLCJDVkUtMjAyNi0xNzM0OSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=hard-coded-credentials&cursor=WyIyMDI2LTA4LTE3VDAyOjAyOjQwLjUwODAwMFoiLCJDVkUtMjAyNi01MDYwMSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/hard-coded-credentials/?cursor=WyIyMDI2LTA4LTE3VDAyOjAyOjQwLjUwODAwMFoiLCJDVkUtMjAyNi01MDYwMSJd>. Everything for agents: <https://agentprime.io/llms.txt>.