Hard-coded credentials.

Pan-Tilt-Zoom cameras default administrative credentials for web interface

• PTZOptics PT12X-SE-xx-G3
• PTZOptics PT12X-LINK-4K-xx
• Hard-coded credentials
• CWE-1392

ECOVACS Vacuum and Base Station Hard-Coded WPA2-PSK

• ECOVACS DEEBOT X1 Series
• ECOVACS DEEBOT T20 Series
• Hard-coded credentials

Pan-Tilt-Zoom cameras hard-coded default passwords with SSH and telnet enabled

• PTZOptics PT12X-SE-xx-G3
• PTZOptics PT12X-LINK-4K-xx
• Hard-coded credentials

ECOVACS Vacuum and Base Station Hard-Coded AES Encryption

• ECOVACS DEEBOT X1 Series
• ECOVACS DEEBOT T20 Series
• Hard-coded credentials

api: Shared OAuth Signing Key Between Different Instances

• FreePBX api
• Hard-coded credentials

Local Deep Research's API keys are stored in plain text

• LearningCircuit local-deep-research
• Information disclosure
• Hard-coded credentials

Use of Hard-coded Credentials in SunPower PVS6

• SunPower PVS6
• Hard-coded credentials

Predictable root linux password generation

• Copeland LP E3 Supervisory Control
• Hard-coded credentials

Privilege escalation in the application services

• Copeland LP E3 Supervisory Control
• Hard-coded credentials

Consistent predictable generation of the password for the default admin user "ONEDAY" to the application services

• Copeland LP E3 Supervisory Control
• Hard-coded credentials

Tenda F1202 Administrative shadow hard-coded credentials

• Tenda F1202
• Hard-coded credentials

Tenda W12 Administrative shadow hard-coded credentials

• Tenda W12
• Hard-coded credentials

Tenda AC9 Administrative shadow hard-coded credentials

• Tenda AC9
• Hard-coded credentials

Cudy LT500E Web shadow hard-coded password

• Cudy LT500E
• Hard-coded credentials
• CWE-255

Changing｜Clinic Image System - Use of Hard-coded Credentials

• Changing Clinic Image System
• Hard-coded credentials

coze-studio aes.go hard-coded key

• coze-studio
• Hard-coded credentials
• CWE-320

An issue in Evope Core v.1.1.3.20 allows a local attacker to obtain sensitive information via the use of hard coded cryptographic keys.

• Hard-coded credentials

NeuVector process with sensitive arguments lead to leakage

• Hard-coded credentials
• CWE-549

<0.0.0-20250902144615-f9ddbdf42031 · fixed in 0.0.0-20250902144615-f9ddbdf42031

Hard-coded password in DOS Co., Ltd. SS1

• DOS Co., Ltd. SS1
• Hard-coded credentials

macrozheng mall Registration weak password

• macrozheng mall
• Hard-coded credentials

egOS WebGUI Hard-Coded JWT Secret Enables Authentication Bypass

• Welotec EG400Mk2-D11001-000101
• Welotec EG400Mk2-D11101-000101
• Hard-coded credentials

Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 were discovered to lack secure password requirements for its BIOS Supervisor and User acc…

• Hard-coded credentials

Securden Unified PAM Shared SSH Key and Cloud Infrastructure

• Securden Unified PAM
• Hard-coded credentials

FNKvision Y215 CCTV Camera Firmware passwd hard-coded credentials

• FNKvision Y215 CCTV Camera
• Hard-coded credentials

Reolink v4.54.0.4.20250526 was discovered to contain a hardcoded encryption key and initialization vector.

• Hard-coded credentials

An issue in PDQ Smart Deploy V.3.0.2040 allows an attacker to escalate privileges via the Credential encryption routines in SDCommon.dll

• Hard-coded credentials

hippo4j Includes Hard Coded Secret Key in JWT Creation

• Hard-coded credentials

>=1.0.0, <=1.5.0 · no fixed version yet

yeqifu carRental Druid login.html hard-coded credentials

• yeqifu carRental
• Hard-coded credentials

Tenda AC10 MD5 Hash shadow hard-coded credentials

• Tenda AC10
• Hard-coded credentials

Unauthorized API Access Risk

• Commvault CommCell
• Hard-coded credentials

GenX_FX authentication bypass in JWT validation

• Mouy-leng GenX_FX
• Hard-coded credentials

VaulTLS has a password-based login exploit in additional user accounts

• 7ritn VaulTLS
• Hard-coded credentials

IBM Concert Software information disclosure

• IBM Concert Software
• Hard-coded credentials

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain insecure credentials for the telnet service and root account.

• Hard-coded credentials

VM images built with Kubernetes Image Builder Nutanix or OVA providers use default credentials for Windows images if user did not override

• Kubernetes Image Builder
• Hard-coded credentials

Tenda AC20 shadow hard-coded credentials

• Tenda AC20
• Hard-coded credentials

linlinjava litemall JSON Web Token JwtHelper.java hard-coded credentials

• linlinjava litemall
• Hard-coded credentials

Hard-coded Private Key Vulnerability in ZKTeco WL20

• ZKTeco Co WL20 Biometric Attendance System
• Hard-coded credentials

Hard-coded Credentials Vulnerability in ZKTeco WL20

• ZKTeco Co WL20 Biometric Attendance System
• Hard-coded credentials

Shenzhen Tuoshi NR500-EA RG500UEAABxCOMSLICv3.4.2731.16.43 devices enable the SSH service by default.

• Hard-coded credentials

Exposed SFTP server

• checkpoint Check Point Harmony SASE
• Information disclosure
• Hard-coded credentials

Insufficiently protected credentials in Siemens SIMATIC RTLS Locating Manager

• Siemens SIMATIC RTLS Locating Manager
• Hard-coded credentials

SolarWinds Database Performance Analyzer Hard-coded Cryptographic Key Vulnerability

• SolarWinds Database Performance Analyzer
• Hard-coded credentials

TRENDnet TN-200 Lighttpd hard-coded key

• TRENDnet TN-200
• Hard-coded credentials
• CWE-320

Belkin F9K1009/F9K1010 Web Interface hard-coded credentials

• Belkin F9K1009
• Belkin F9K1010
• Hard-coded credentials

Weak credentials in SEIKO EPSON Multiple EPSON product and others

• SEIKO EPSON Multiple EPSON product
• FUJIFILM Corporation FRONTIER DX400W
• Hard-coded credentials

Himmelblau's Kerberos credential cache collection is world readable

• himmelblau
• Hard-coded credentials

Use of Hard-coded Credentials in Tigo Energy Cloud Connect Advanced

• Tigo Energy Cloud Connect Advanced
• Hard-coded credentials

An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices.

• Information disclosure
• Broken access control

onion-site-template tor Secrets Baked Into Image

• Vessel9817 onion-site-template
• Hard-coded credentials

Jans CLI stores plaintext passwords in the local cli_cmd.log file

• jans
• Hard-coded credentials

Draeger: ICMHelper is vulnerable to use of Hard-coded Cryptographic Key

• Draeger ICMHelper
• Hard-coded credentials

atjiu pybbs UserAdminController.java update weak password

• atjiu pybbs
• Hard-coded credentials

Hard-coded cryptographic key in Dell ECS and others

• Dell ECS
• Dell ObjectScale
• Hard-coded credentials

Hard-coded cryptographic key in Dell Enterprise SONiC OS

• Dell Enterprise SONiC OS
• Hard-coded credentials

Insufficiently protected credentials in Dell Digital Delivery

• Dell Digital Delivery
• Hard-coded credentials

Austrian Archaeological Institute (AI) OpenAtlas v8.11.0 as discovered to contain a hardcoded Administrator password.

• Hard-coded credentials
• CWE-1392

Hard-coded cryptographic key in RUCKUS Network Director

• RUCKUS Network Director
• Hard-coded credentials

Hard-coded password in RUCKUS Network Director

• RUCKUS Network Director
• Hard-coded credentials

Certain Draytek products are affected by Insecure Configuration.

• Broken access control
• Hard-coded credentials