Hard-coded credentials.

Newforma Info Exchange (NIX) shared hard-coded secret key

• Newforma Project Center
• Hard-coded credentials

Dependency-Track possibly discloses private NuGet repository credentials to api.nuget.org

• DependencyTrack dependency-track
• Hard-coded credentials

Kibana Insufficiently Protected Credentials in the CrowdStrike Connector

• Elastic Kibana
• Hard-coded credentials

NovoSGA: Manipulation of User Creation Page can lead to weak password requirements

• Hard-coded credentials

<=2.2.12 · no fixed version yet

CRMEB JWT HMAC Secret hard-coded key

• CRMEB
• Hard-coded credentials
• CWE-320

Zytec Dalian Zhuoyun Technology Central Authentication Service HTTP Header git hard-coded password

• Zytec Dalian Zhuoyun Technology Central Authentication Service
• Hard-coded credentials
• CWE-255

Hardcoded Credentials in Logo Software's TigerWings ERP

• Logo Software Inc. TigerWings ERP
• Hard-coded credentials

LDAP 'Bind password' field value can be leaked by a Zabbix Super Admin

• Zabbix
• Hard-coded credentials

Hard-coded Credentials in PosCube's Assist

• PosCube Hardware Software and Consulting Ltd. Co. Assist
• Broken access control
• Hard-coded credentials

The Flock Safety DetectionProcessing com.flocksafety.android.objects application 6.35.33 for Android (installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices) bundles…

• Hard-coded credentials

IBM Transformation Extender Advanced information disclosure

• IBM Transformation Extender Advanced
• Hard-coded credentials

Keysight Ixia Vision Product Family Use of Hard-coded Cryptographic Key

• Keysight Ixia Vision Product Family
• Hard-coded credentials

Vasion Print (formerly PrinterLogic) Undocumented Hardcoded SSH Key

• Vasion Print Virtual Appliance Host
• Vasion Print Application
• Hard-coded credentials

Copypress Rest API 1.1 - 1.2 - Missing Configurable JWT Secret and File-Type Validation to Unauthenticated Remote Code Execution

• copypressdev Copypress Rest API
• Hard-coded credentials

Vasion Print (formerly PrinterLogic) Unauthenticated Firmware Update Endpoint RCE

• Vasion Print Virtual Appliance Host
• Vasion Print Application
• Authentication bypass
• Hard-coded credentials

Vasion Print (formerly PrinterLogic) Insecure SSH Client Configuration

• Vasion Print Virtual Appliance Host
• Vasion Print Application
• Authentication bypass
• Hard-coded credentials

Vasion Print (formerly PrinterLogic) Insecure Installation Credentials

• Vasion Print Virtual Appliance Host
• Vasion Print Application
• Authentication bypass
• Hard-coded credentials

Vasion Print (formerly PrinterLogic) Hardcoded SSL Certificate and Private Keys

• Vasion Print Virtual Appliance Host
• Vasion Print Application
• Hard-coded credentials

Vasion Print (formerly PrinterLogic) Hardcoded GPG Private Key

• Vasion Print Virtual Appliance Host
• Vasion Print Application
• Hard-coded credentials

Vasion Print (formerly PrinterLogic) Hardcoded Encryption Private Keys

• Vasion Print Virtual Appliance Host
• Vasion Print Application
• Hard-coded credentials

Vasion Print (formerly PrinterLogic) Hardcoded PrinterLogic CA Private Key and Hardcoded Password

• Vasion Print Virtual Appliance Host
• Vasion Print Application
• Hard-coded credentials

Apeman ID71 system.ini hard-coded credentials

• Apeman ID71
• Hard-coded credentials

IBM Controller information disclosure

• IBM Cognos Controller
• IBM Controller
• Hard-coded credentials

Hard-coded cryptographic key in Unitree Go2 and others

• Unitree Go2
• Unitree G1
• Hard-coded credentials

In DOXENSE WATCHDOC before 6.1.0.5094, private user puk codes can be disclosed for Active Directory registered users (there is hard-coded and predictable data).

• Hard-coded credentials

Insufficiently Protected Credentials in Dingtian DT-R002

• Dingtian DT-R002
• Hard-coded credentials

Insufficiently Protected Credentials in Dingtian DT-R002

• Dingtian DT-R002
• Hard-coded credentials

Ericsson Indoor Connect 8855 - Insufficiently Protected Credentials Vulnerability

• Ericsson Indoor Connect 8855
• Hard-coded credentials

Insufficiently Protected Credentials in Puppet Enterprise 2025.4 and 2025.5

• Perforce Puppet Enterprise
• Hard-coded credentials

AutomationDirect CLICK PLUS Use of Hard-coded Cryptographic Key

• AutomationDirect CLICK PLUS C0-0x CPU firmware
• AutomationDirect CLICK PLUS C0-1x CPU firmware
• Hard-coded credentials

Weak Authentication for Root User

• Novakon P series (P07, P10, P12, P15)
• Hard-coded credentials

WordPress WP Project Manager Plugin <= 2.6.25 - Sensitive Data Exposure Vulnerability

• weDevs WP Project Manager
• Hard-coded credentials

WordPress Estonian Shipping Methods for WooCommerce Plugin <= 1.7.2 - Sensitive Data Exposure Vulnerability

• Risto Niinemets Estonian Shipping Methods for WooCommerce
• Hard-coded credentials

WordPress Helpie FAQ plugin <= 1.45 - Sensitive Data Exposure vulnerability

• Essekia Helpie FAQ
• Hard-coded credentials

Insufficient hardening of the proxyuser account in the AiKaan IoT management platform, combined with the use of a shared, hardcoded SSH private key, allows remote attackers to authenticate to the clo…

• Hard-coded credentials

AiKaan Cloud Controller uses a single hardcoded SSH private key and the username `proxyuser` for remote terminal access to all managed IoT/edge devices.

• Hard-coded credentials

Creacast Creabox Manager contains a critical authentication flaw that allows an attacker to bypass login validation.

• Authentication bypass
• Hard-coded credentials

Vasion Print (formerly PrinterLogic) Shared / Hardcoded SSH Host Private Keys in Appliance Image

• Vasion Print Virtual Appliance Host
• Vasion Print Application
• Hard-coded credentials

Vasion Print (formerly PrinterLogic) Undocumented Local Account with Hardcoded Password and Passwordless sudo

• Vasion Print Virtual Appliance Host
• Vasion Print Application
• Hard-coded credentials

Hardcoded credentials in default configuration of PPress 0.0.9.

• Hard-coded credentials

Cognex In-Sight Explorer and In-Sight Camera Firmware Use of Hard-coded Password

• Cognex In-Sight 2000 series
• Cognex In-Sight 7000 series
• Hard-coded credentials

Dover Fueling Solutions ProGauge MagLink LX4 Devices Use of Weak Credentials

• Dover Fueling Solutions ProGauge MagLink LX 4
• Dover Fueling Solutions ProGauge MagLink LX Plus
• Hard-coded credentials

Dover Fueling Solutions ProGauge MagLink LX 4 Devices Use of Hard-coded Cryptographic Key

• Dover Fueling Solutions ProGauge MagLink LX 4
• Dover Fueling Solutions ProGauge MagLink LX Plus
• Hard-coded credentials

H3C devices running firmware version NX15V100R015 are vulnerable to unauthorized access due to insecure default credentials.

• Hard-coded credentials
• CWE-1188

Hardcoded passwords

• ABB FLXEON
• Hard-coded credentials

BMC Control-M/Agent hardcoded Blowfish keys

• BMC Control-M/Agent
• Hard-coded credentials
• Weak cryptography or TLS

An issue was discovered in Siklu Communications Etherhaul 8010TX and 1200FX devices, Firmware 7.4.0 through 10.7.3 and possibly other previous versions.

• Hard-coded credentials

iteachyou Dreamer CMS updatePwd weak password

• iteachyou Dreamer CMS
• Hard-coded credentials

An issue in TOTOLINK Wi-Fi 6 Router Series Device X2000R-Gh-V2.0.0 allows a remote attacker to execute arbitrary code via the default password

• Hard-coded credentials

An issue in H3C Magic M Device M2V100R006 allows a remote attacker to execute arbitrary code via the default password

• Hard-coded credentials

An issue in H3C Device R365V300R004 allows a remote attacker to execute arbitrary code via the default password.

• Hard-coded credentials

DJI Mavic Spark/Mavic Air/Mavic Mini Telemetry Channel hard-coded key

• DJI Mavic Spark
• DJI Mavic Air
• Hard-coded credentials
• CWE-320

BeyondCart Connector <= 3.0.1 - Missing Configuration of JWT Secret to Unauthenticated Privilege Escalation via determine_current_user Filter

• BeyondCart Connector
• Hard-coded credentials

Hardcoded credentials in Dietly v1.25.0 for android allows attackers to gain sensitive information.

• Hard-coded credentials

Insufficiently protected credentials in NVIDIA NVDebug tool

• NVIDIA NVDebug tool
• Hard-coded credentials

Hard-coded credentials in Baicells SPECTRA LTE-U eNB

• Baicells SPECTRA LTE-U eNB
• Hard-coded credentials

Insecure Storage of Sensitive Information in SAP Business One (SLD)

• SAP_SE SAP Business One (SLD)
• Hard-coded credentials

Credential Disclosure via Insecure Storage on Charge Controller

• Bender CC612
• Bender CC613
• Hard-coded credentials

running-elephant Datart API AESUtil.java getTokensecret hard-coded key

• running-elephant Datart
• Hard-coded credentials
• CWE-320

Onyxia private helm repository credentials are leaked through unauthenticated API

• InseeFrLab onyxia
• Hard-coded credentials