# Hard-coded credentials.

Passwords and keys built into the code, or weak credentials. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Hard-coded credentials in NVIDIA Infrastructure Controller](https://agentprime.io/advisories/CVE-2026-65113.md)
  `CVE-2026-65113` · CVE record: NVIDIA Infrastructure Controller · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Sept 2026 · Tags: Hard-coded credentials
- [Redact SNMP community, SNMPv3 pass phrases, and IPMI password in host config REST API GET responses](https://agentprime.io/advisories/CVE-2026-92882.md)
  `CVE-2026-92882` · CVE record: Checkmk GmbH Checkmk · CVSS 2.3 Low · Not analysed yet · Published 22 Sept 2026 · Tags: Hard-coded credentials
- [Joplin: KaTeX \`trust:true\` enables URL-allowlist bypass leading to NTLMv2 credential theft via UNC path on Windows](https://agentprime.io/advisories/CVE-2026-49449.md)
  `CVE-2026-49449` · CVE record: laurent22 joplin · CVSS 2.5 Low · Not analysed yet · Published 21 Sept 2026 · Tags: Information disclosure, Hard-coded credentials, CWE-829
- [HomeBox: Cross-Tenant IDOR in Notifier Update Leaks Shoutrrr Credentials and Allows Webhook Hijack](https://agentprime.io/advisories/CVE-2026-48976.md)
  `CVE-2026-48976` · CVE record: sysadminsmedia homebox · CVSS 8.1 High · Not analysed yet · Published 21 Sept 2026 · Tags: Hard-coded credentials, Broken access control
- [GoCD is vulnerable to credential exposure when admins insecurely configure material URLs](https://agentprime.io/advisories/CVE-2026-55870.md)
  `CVE-2026-55870` · CVE record: gocd gocd · CVSS 2.3 Low · Not analysed yet · Published 21 Sept 2026 · Tags: Information disclosure, Hard-coded credentials
- [Hardcoded Key Vulnerability in ZTE SmartLife APP](https://agentprime.io/advisories/CVE-2026-86555.md)
  `CVE-2026-86555` · CVE record: ZTE SmartLife · CVSS 6.2 Medium · Not analysed yet · Published 20 Sept 2026 · Tags: Hard-coded credentials
- [aiyiyi121 SxDevOps Settings settings.py hard-coded credentials](https://agentprime.io/advisories/CVE-2026-93970.md)
  `CVE-2026-93970` · CVE record: aiyiyi121 SxDevOps · CVSS 6.9 Medium · Not analysed yet · Published 20 Sept 2026 · Tags: Hard-coded credentials
- [aiyiyi121 SxDevOps services.py ensure_default_superuser hard-coded credentials](https://agentprime.io/advisories/CVE-2026-93969.md)
  `CVE-2026-93969` · CVE record: aiyiyi121 SxDevOps · CVSS 6.9 Medium · Not analysed yet · Published 20 Sept 2026 · Tags: Hard-coded credentials
- [IBM Guardium Data Protection is affected by multiple vulnerabilities.](https://agentprime.io/advisories/CVE-2026-84034.md)
  `CVE-2026-84034` · CVE record: IBM Guardium Data Protection · CVSS 8.8 High · Not analysed yet · Published 18 Sept 2026 · Tags: Hard-coded credentials
- [AnyCable: Telemetry Subsystem Contains Hardcoded Authentication Token and Transmits CLI Arguments Including Secrets](https://agentprime.io/advisories/GHSA-w72w-9qmj-c9qm.md)
  `GHSA-w72w-9qmj-c9qm`, `CVE-2026-63406`, `GO-2026-6529` · Go `github.com/anycable/anycable`: affected `<1.6.15`, fixed in `1.6.15` · CVSS 5.9 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Information disclosure, Hard-coded credentials
- [Use of Hard-coded Credentials in Bransys ELD](https://agentprime.io/advisories/CVE-2026-77960.md)
  `CVE-2026-77960` · CVE record: Bransys ELD · CVSS 6.9 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Hard-coded credentials
- [Use of Hard-coded Credentials in Bransys ELD](https://agentprime.io/advisories/CVE-2026-86520.md)
  `CVE-2026-86520` · CVE record: Bransys ELD · CVSS 8.7 High · Not analysed yet · Published 18 Sept 2026 · Tags: Hard-coded credentials
- [WeGIA: Hardcoded Secret Key Backdoor — Mass Data Destruction via deletar_socios.php](https://agentprime.io/advisories/CVE-2026-54767.md)
  `CVE-2026-54767` · CVE record: LabRedesCefetRJ WeGIA · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: Authentication bypass, Hard-coded credentials
- [Grav: UserInterface offsetget/offsetexists allow-listed in Twig sandbox let editor-authored content leak hashed_password and 2FA secrets via offsetGet()](https://agentprime.io/advisories/GHSA-3jhr-mxmx-38cx.md)
  `GHSA-3jhr-mxmx-38cx`, `CVE-2026-76839`, `PKSA-f7gk-wxm8-5j49` · Packagist `getgrav/grav`: affected `<2.0.16`, fixed in `2.0.16` · CVSS 8.7 High · Not analysed yet · Published 17 Sept 2026 · Tags: Hard-coded credentials
- [Grav: config_denied_paths default list omits \`system\`, exposing real secrets (e.g. system.cache.redis.password) via the Twig sandbox when config_access is enabled](https://agentprime.io/advisories/GHSA-xjw5-q542-3vmr.md)
  `GHSA-xjw5-q542-3vmr`, `CVE-2026-76846`, `PKSA-rk3g-1sfp-78gs` · Packagist `getgrav/grav`: affected `<2.0.16`, fixed in `2.0.16` · CVSS 8.7 High · Not analysed yet · Published 17 Sept 2026 · Tags: Hard-coded credentials
- [Obsidian Web MCP: Unauthenticated vault access: /oauth/authorize auto-approves without authenticating the user](https://agentprime.io/advisories/CVE-2026-54618.md)
  `CVE-2026-54618` · CVE record: jimprosser obsidian-web-mcp · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: Authentication bypass, Hard-coded credentials, Open redirect
- [lxc-ci: Pacman keyring stored in archlinux image with a private key](https://agentprime.io/advisories/CVE-2026-52727.md)
  `CVE-2026-52727` · CVE record: lxc lxc-ci · CVSS 7.2 High · Not analysed yet · Published 17 Sept 2026 · Tags: Hard-coded credentials
- [AsyncHttpClient re-sends client-wide realm credentials to a cross-origin redirect target](https://agentprime.io/advisories/GHSA-f8m2-889x-vw4x.md)
  `GHSA-f8m2-889x-vw4x`, `CVE-2026-85717` · Maven `org.asynchttpclient:async-http-client`: affected `>=3.0.9, <3.0.12 || >=2.14.5, <2.16.1`, fixed in `3.0.12`, `2.16.1` · CVSS 6.8 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Information disclosure, Hard-coded credentials
- [AsyncHttpClient sends origin credentials to the proxy on the plaintext CONNECT request](https://agentprime.io/advisories/GHSA-xr57-gcx8-52hf.md)
  `GHSA-xr57-gcx8-52hf`, `CVE-2026-85720` · Maven `org.asynchttpclient:async-http-client`: affected `>=3.0.0, <3.0.12 || >=2.0.0, <2.16.1`, fixed in `3.0.12`, `2.16.1` · CVSS 5.9 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Weak cryptography or TLS, Hard-coded credentials
- [SolarWinds Access Rights Manager Unauthenticated Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-28326.md)
  `CVE-2026-28326` · CVE record: SolarWinds Access Rights Manager · CVSS 8.8 High · Not analysed yet · Published 17 Sept 2026 · Tags: Hard-coded credentials
- [AsyncHttpClient: SOCKS proxy credentials sent to the origin server over plaintext HTTP](https://agentprime.io/advisories/CVE-2026-85719.md)
  `CVE-2026-85719` · CVE record: AsyncHttpClient async-http-client · CVSS 7.5 High · Not analysed yet · Published 17 Sept 2026 · Tags: Weak cryptography or TLS, Hard-coded credentials
- [pgAdmin 4: Connection-string injection via the database field in the Restore and Maintenance tools](https://agentprime.io/advisories/CVE-2026-86862.md)
  `CVE-2026-86862` · CVE record: pgadmin.org pgAdmin 4 · CVSS 7.1 High · Not analysed yet · Published 17 Sept 2026 · Tags: Command injection, Hard-coded credentials, Server-side request forgery (SSRF)
- [Hard-coded credentials in Dell OpenManage Server Administrator Managed Node (Patch) for Windows and others](https://agentprime.io/advisories/CVE-2026-81440.md)
  `CVE-2026-81440` · CVE record: Dell OpenManage Server Administrator Managed Node (Patch) for Windows and 4 more · CVSS 7.3 High · Not analysed yet · Published 17 Sept 2026 · Tags: Hard-coded credentials
- [Hard-coded cryptographic key in Dell OpenManage Server Administrator Managed Node (Patch) for Windows and others](https://agentprime.io/advisories/CVE-2026-81478.md)
  `CVE-2026-81478` · CVE record: Dell OpenManage Server Administrator Managed Node (Patch) for Windows and 4 more · CVSS 8.1 High · Not analysed yet · Published 17 Sept 2026 · Tags: Hard-coded credentials
- [Hard-coded Encryption Key Vulnerability in Acer System Monitoring for NitroSense and PredatorSense Software](https://agentprime.io/advisories/CVE-2026-50606.md)
  `CVE-2026-50606` · CVE record: Acer System Monitoring · CVSS 1.2 Low · Not analysed yet · Published 17 Sept 2026 · Tags: Hard-coded credentials
- [Hard-coded encryption key vulnerability in Acer Agent Service for NitroSense and PredatorSense](https://agentprime.io/advisories/CVE-2026-50603.md)
  `CVE-2026-50603` · CVE record: Acer Agent Service · CVSS 4.9 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Hard-coded credentials
- [All-in-One WP Migration and Backup <= 7.110 - Unauthenticated Insufficient Credential Protection via Authorization Basic Header](https://agentprime.io/advisories/CVE-2026-89064.md)
  `CVE-2026-89064` · CVE record: servmask All-in-One WP Migration and Backup · CVSS 5.3 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Hard-coded credentials
- [Feast through 0.66.0 Authentication Bypass via Unverified Token](https://agentprime.io/advisories/CVE-2026-92787.md)
  `CVE-2026-92787` · CVE record: feast-dev feast · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Hard-coded credentials
- [SecObserve before 1.59.1 Information Disclosure via API Configuration](https://agentprime.io/advisories/CVE-2026-92759.md)
  `CVE-2026-92759` · CVE record: SecObserve SecObserve · CVSS 7.1 High · Not analysed yet · Published 16 Sept 2026 · Tags: Hard-coded credentials
- [Cisco Identity Services Engine Hardening Release - Insuffiencently Protected Credential Vulnerabilities](https://agentprime.io/advisories/CVE-2026-20234.md)
  `CVE-2026-20234` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Hard-coded credentials
- [Insufficiently protected credentials in Jenkins Project Jenkins GitLab Plugin](https://agentprime.io/advisories/CVE-2026-92133.md)
  `CVE-2026-92133` · CVE record: Jenkins Project Jenkins GitLab Plugin · CVSS 5.4 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Hard-coded credentials
- [Hard-coded cryptographic key in QualitySoft Corporation QND Premium and others](https://agentprime.io/advisories/CVE-2026-81326.md)
  `CVE-2026-81326` · CVE record: QualitySoft Corporation QND Premium and 2 more · CVSS 6.8 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Hard-coded credentials
- [Netcore NR255-V 1.5.130703 IPsec PSK and RSA Key Disclosure via l2tpd_config_show.cgi Read Handlers](https://agentprime.io/advisories/CVE-2026-92256.md)
  `CVE-2026-92256` · CVE record: Netcore NR255-V · CVSS 7.1 High · Not analysed yet · Published 15 Sept 2026 · Tags: Hard-coded credentials
- [Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via VPN Read Handlers](https://agentprime.io/advisories/CVE-2026-76871.md)
  `CVE-2026-76871` · CVE record: Netcore NR255-V · CVSS 7.1 High · Not analysed yet · Published 15 Sept 2026 · Tags: Hard-coded credentials
- [Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via user_pass_show.cgi](https://agentprime.io/advisories/CVE-2026-76859.md)
  `CVE-2026-76859` · CVE record: Netcore NR255-V · CVSS 7.1 High · Not analysed yet · Published 15 Sept 2026 · Tags: Hard-coded credentials
- [Netcore NR255-V 1.5.130703 Plaintext DDNS Credential Disclosure via ddns_wan_list_show.cgi](https://agentprime.io/advisories/CVE-2026-76857.md)
  `CVE-2026-76857` · CVE record: Netcore NR255-V · CVSS 7.1 High · Not analysed yet · Published 15 Sept 2026 · Tags: Hard-coded credentials
- [Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via l7_web_auth_user_show.cgi](https://agentprime.io/advisories/CVE-2026-76854.md)
  `CVE-2026-76854` · CVE record: Netcore NR255-V · CVSS 7.1 High · Not analysed yet · Published 15 Sept 2026 · Tags: Hard-coded credentials
- [Wärtsilä FOS-Onboard Use of Hard-coded Cryptographic Key](https://agentprime.io/advisories/CVE-2026-81855.md)
  `CVE-2026-81855` · CVE record: Wärtsilä FOS-Onboard · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Hard-coded credentials
- [Wärtsilä FOS-Onboard Use of Hard-coded Cryptographic Key](https://agentprime.io/advisories/CVE-2026-78225.md)
  `CVE-2026-78225` · CVE record: Wärtsilä FOS-Onboard · CVSS 9.5 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Hard-coded credentials
- [Use of Hard-coded Credentials in Digital Watchdog VMAX DVR and NVR Product Lineups](https://agentprime.io/advisories/CVE-2026-68950.md)
  `CVE-2026-68950` · CVE record: Digital Watchdog VMAX A1 G4 DVR and 4 more · CVSS 8.7 High · Not analysed yet · Published 15 Sept 2026 · Tags: Hard-coded credentials
- [Use of Hard-coded Credentials in Digital Watchdog VMAX DVR and NVR Product Lineups](https://agentprime.io/advisories/CVE-2026-66890.md)
  `CVE-2026-66890` · CVE record: Digital Watchdog VMAX A1 G4 DVR and 4 more · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Hard-coded credentials
- [Duplicate Advisory: Vikunja: TOTP secret is readable after enrollment, no step-up auth](https://agentprime.io/advisories/GHSA-jmr8-r558-3jhx.md)
  `GHSA-jmr8-r558-3jhx` · Go `code.vikunja.io/api`: affected `<=2.5.0`, no fixed version yet · CVSS 4.3 Medium · Withdrawn · Not analysed yet · Published 15 Sept 2026 · Tags: Hard-coded credentials
- [Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access](https://agentprime.io/advisories/CVE-2026-11921.md)
  `CVE-2026-11921` · CVE record: IBM Verify Identity Access and 3 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Hard-coded credentials
- [Issabel Framework Hard-coded JWT Key RCE via pbxapi/manager/originate](https://agentprime.io/advisories/CVE-2026-89026.md)
  `CVE-2026-89026` · CVE record: Issabel Foundation Issabel Framework · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Hard-coded credentials
- [OpenBMC IPMI Authentication Bypass via Default userKey and Stale Challenge Value](https://agentprime.io/advisories/CVE-2026-16141.md)
  `CVE-2026-16141` · CVE record: OpenBMC phosphor-net-ipmid · CVSS 8.1 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption, Hard-coded credentials
- [Tenda Technology Co., Ltd NVR_4H CH3 v2.1 V27.5.58.6 was discovered to contain a hardcoded cryptographic key.](https://agentprime.io/advisories/CVE-2026-79551.md)
  `CVE-2026-79551` · CVE record · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Hard-coded credentials
- [TOTOLINK X5000R V9.1.0cu.2415_B20250515 was discovered to contain a hardcoded password for root access.](https://agentprime.io/advisories/CVE-2026-37152.md)
  `CVE-2026-37152` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Hard-coded credentials
- [Crawlab through 0.6.3 Authentication Bypass via Hard-coded JWT Secret](https://agentprime.io/advisories/CVE-2026-90945.md)
  `CVE-2026-90945` · CVE record: crawlab-team crawlab · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Sept 2026 · Tags: Hard-coded credentials
- [Apache Storm Nimbus, Apache Storm UI: Disclosure of Unredacted Daemon Configuration via Nimbus and the UI](https://agentprime.io/advisories/CVE-2026-82433.md)
  `CVE-2026-82433` · CVE record: Apache Software Foundation Apache Storm Nimbus and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Hard-coded credentials, Broken access control
- [Apache Storm Nimbus, Apache Storm Client: Disclosure of the Topology ZooKeeper Credential to Read-Only Users and to Logs](https://agentprime.io/advisories/CVE-2026-82434.md)
  `CVE-2026-82434` · CVE record: Apache Software Foundation Apache Storm Nimbus and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Sept 2026 · Tags: Hard-coded credentials, Information disclosure
- [Apache Storm Nimbus, Apache Storm UI: Disclosure of Unredacted Merged Daemon Configuration via the Topology Page](https://agentprime.io/advisories/CVE-2026-84179.md)
  `CVE-2026-84179` · CVE record: Apache Software Foundation Apache Storm Nimbus and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Information disclosure, Hard-coded credentials
- [Apache Syncope: Nested secrets leak cleartext into audit records readable](https://agentprime.io/advisories/CVE-2026-75015.md)
  `CVE-2026-75015` · CVE record: Apache Software Foundation Apache Syncope · CVSS 4.9 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Hard-coded credentials
- [MISP Interactive CLI Shell: Authorization Bypass, Credential Exposure, and Terminal Injection](https://agentprime.io/advisories/CVE-2026-90895.md)
  `CVE-2026-90895` · CVE record: MISP MISP · CVSS 8.4 High · Not analysed yet · Published 14 Sept 2026 · Tags: Information disclosure, Hard-coded credentials, Broken access control, CWE-150
- [Insufficiently protected credentials in Contec Co., Ltd. Remote I/O Coupler Unit (Server Type) CPSN-MCB271-\*](https://agentprime.io/advisories/CVE-2026-82786.md)
  `CVE-2026-82786` · CVE record: Contec Co., Ltd. Remote I/O Coupler Unit (Server Type) CPSN-MCB271-\* · CVSS 8.2 High · Not analysed yet · Published 14 Sept 2026 · Tags: Hard-coded credentials
- [dromara orion-visor HostKeyServiceImpl.java HostKeyServiceImpl.encryptKey hard-coded key](https://agentprime.io/advisories/CVE-2026-90510.md)
  `CVE-2026-90510` · CVE record: dromara orion-visor · CVSS 6.9 Medium · Not analysed yet · Published 13 Sept 2026 · Tags: Hard-coded credentials, CWE-320
- [dromara orion-visor ExposeApiAspect.java ExposeApiAspect.beforeExposeApi hard-coded credentials](https://agentprime.io/advisories/CVE-2026-90509.md)
  `CVE-2026-90509` · CVE record: dromara orion-visor · CVSS 6.9 Medium · Not analysed yet · Published 13 Sept 2026 · Tags: Hard-coded credentials
- [Central Dogma: Hard-coded ZooKeeper replication secret 'ch4n63m3' with silent fallback enables cluster takeover](https://agentprime.io/advisories/GHSA-2j95-gqxf-v3vg.md)
  `GHSA-2j95-gqxf-v3vg`, `CVE-2026-11746` · Maven `com.linecorp.centraldogma:centraldogma-server`: affected `<0.84.0`, fixed in `0.84.0` · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026 · Tags: Hard-coded credentials
- [Insufficiently protected credentials in Schneider Electric SCADAPack 47x and others](https://agentprime.io/advisories/CVE-2026-81861.md)
  `CVE-2026-81861` · CVE record: Schneider Electric SCADAPack 47x and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 11 Sept 2026 · Tags: Hard-coded credentials
- [CareCam Pro IP Cameras Use of Hard-coded Credentials](https://agentprime.io/advisories/CVE-2026-85083.md)
  `CVE-2026-85083` · CVE record: CareCam ANJIA AJL33PC0801 Firmware · CVSS 7.0 High · Not analysed yet · Published 11 Sept 2026 · Tags: Hard-coded credentials
- [Use of hardcoded default credentials in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier stores static account credentials in unencrypted plaintext within bin/config.xml and comp…](https://agentprime.io/advisories/CVE-2026-79396.md)
  `CVE-2026-79396` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026 · Tags: Hard-coded credentials

Newest: <https://agentprime.io/advisories/tag/hard-coded-credentials.md>
Older: <https://agentprime.io/advisories/tag/hard-coded-credentials.md?cursor=WyIyMDI2LTA5LTExVDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyNi03OTM5NiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=hard-coded-credentials&cursor=WyIyMDI2LTA5LTIyVDE0OjEwOjMzLjM0NjAwMFoiLCJDVkUtMjAyNi02NTExNyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/hard-coded-credentials/?cursor=WyIyMDI2LTA5LTIyVDE0OjEwOjMzLjM0NjAwMFoiLCJDVkUtMjAyNi02NTExNyJd>. Everything for agents: <https://agentprime.io/llms.txt>.