Hard-coded credentials.

rclone: http backend forwards custom/auth headers to a different host on redirect

• Information disclosure
• Weak cryptography or TLS

>=1.49.0, <1.75.1 · fixed in 1.75.1

Hard-coded credentials in Lenovo Health Application

• Lenovo Health Application
• Hard-coded credentials

Hard-coded credentials in Hikvision DS-KV9503 and others

• Hikvision DS-KV9503
• Hikvision DS-KV6113
• Hard-coded credentials
• CWE-1310

Use of Hard-coded Credentials in drEryk Gabinet

• drEryk Gabinet
• Hard-coded credentials

Nuxt Ollama: Public Runtime Config Exposes Ollama API Key to Browser Clients

• Hard-coded credentials

>=1.2.26, <1.3.1 · fixed in 1.3.1

MaxSite CMS through 109.6 Authentication Bypass via Hardcoded Encryption Key

• MaxSite CMS
• Hard-coded credentials

Softish C6 Ear Camera and EarVision Android Application Use of Hard-coded Credentials

• Softish EarVision Android application
• Softish C6 Ear Camera
• Hard-coded credentials

Hard-coded cryptographic key in Dell Secure Connect Gateway 5.0 - Application and others

• Dell Secure Connect Gateway 5.0 - Application
• Dell Secure Connect Gateway 5.0 - Appliance
• Hard-coded credentials

Hard-coded credentials in Dell Secure Connect Gateway 5.0 - Application and others

• Dell Secure Connect Gateway 5.0 - Application
• Dell Secure Connect Gateway 5.0 - Appliance
• Hard-coded credentials

Hard-coded credentials in Dell Secure Connect Gateway 5.0 - Application and others

• Dell Secure Connect Gateway 5.0 - Application
• Dell Secure Connect Gateway 5.0 - Appliance
• Hard-coded credentials

Hard-coded credentials in Dell Secure Connect Gateway 5.0 - Application and others

• Dell Secure Connect Gateway 5.0 - Application
• Dell Secure Connect Gateway 5.0 - Appliance
• Hard-coded credentials

Hard-coded credentials in Dell Secure Connect Gateway 5.0 - Application and others

• Dell Secure Connect Gateway 5.0 - Application
• Dell Secure Connect Gateway 5.0 - Appliance
• Hard-coded credentials

Hard-coded cryptographic key in Dell Secure Connect Gateway 5.0 - Application and others

• Dell Secure Connect Gateway 5.0 - Application
• Dell Secure Connect Gateway 5.0 - Appliance
• Hard-coded credentials

Hard-coded cryptographic key in Dell Secure Connect Gateway 5.0 - Application and others

• Dell Secure Connect Gateway 5.0 - Application
• Dell Secure Connect Gateway 5.0 - Appliance
• Hard-coded credentials

Authentication Bypass via Hardcoded Master Verification Code vulnerability in Siam Ordering (siam-server) 1.0.0 allows remote unauthenticated attackers to log in as any user, merchant, or administrat…

• Hard-coded credentials

An issue was discovered in s-pms SPMS-Server through v1.0.

• Hard-coded credentials

OpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryption

• OpenIDC cjose
• Hard-coded credentials
• Weak cryptography or TLS

Information disclosure in Eclipse Foundation Eclipse aeriOS

• Eclipse Foundation Eclipse aeriOS
• Information disclosure
• Authentication bypass

Infracost: Terraform Cloud and registry token disclosure via unvalidated hostname

• Hard-coded credentials

<0.10.45 · fixed in 0.10.45

ningzichun Student Management System Database Connection database.php mysqli_connect hard-coded credentials

• ningzichun Student Management System
• Hard-coded credentials

AVEVA Pipeline Integrity Monitor Use of hard-coded cryptographic key

• AVEVA Pipeline Integrity Monitor
• Hard-coded credentials

.NET Elevation of Privilege Vulnerability

• Microsoft Visual Studio 2022 version 17.14
• Microsoft Visual Studio 2026 version 18.9
• Path traversal
• Information disclosure

Microsoft Office Spoofing Vulnerability

• Microsoft 365 Apps for Enterprise
• Hard-coded credentials

GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability

• Microsoft Visual Studio Code
• Hard-coded credentials

Azure CycleCloud Information Disclosure Vulnerability

• Microsoft Azure CycleCloud 8.9.2
• Hard-coded credentials

Insufficiently Protected Credentials in MongoDB Server Diagnostic Reporting Interface

• MongoDB Server
• Hard-coded credentials

Workload identity attestation generated before login host validation in Snowflake drivers

• Snowflake Connector for Python
• Snowflake Go Driver
• Hard-coded credentials
• CWE-441

AVideo through 29.0 Information Disclosure via restreamsActive.json.php

• WWBN AVideo
• Hard-coded credentials

Netis NX10 Credential Disclosure via sysinfo Diagnostic Endpoint

• Netis Systems NX10
• Hard-coded credentials

@sap/cds-mtx: Credential disclosure in multitenant applications using SAP Cloud Application Programming Model (CAP)

• Hard-coded credentials

<1.18.4 || >=2.0.2, <2.7.7 || >=3.0.1, <3.9.7 || >=4.0.1, <4.0.3 · fixed in 1.18.4, 2.7.7, 3.9.7, 4.0.3

Hard-coded cryptographic key in Dell Secure Connect Gateway 5.0 - Application and others

• Dell Secure Connect Gateway 5.0 - Application
• Dell Secure Connect Gateway 5.0 - Appliance
• Hard-coded credentials

Hard-coded cryptographic key in Dell Secure Connect Gateway 5.0 - Application and others

• Dell Secure Connect Gateway 5.0 - Application
• Dell Secure Connect Gateway 5.0 - Appliance
• Hard-coded credentials

Hard-coded credentials in Dell Secure Connect Gateway 5.0 - Application and others

• Dell Secure Connect Gateway 5.0 - Application
• Dell Secure Connect Gateway 5.0 - Appliance
• Hard-coded credentials

Hard-coded cryptographic key in Dell Secure Connect Gateway 5.0 - Application and others

• Dell Secure Connect Gateway 5.0 - Application
• Dell Secure Connect Gateway 5.0 - Appliance
• Hard-coded credentials

Hard-coded credentials in Dell Secure Connect Gateway 5.0 - Application and others

• Dell Secure Connect Gateway 5.0 - Application
• Dell Secure Connect Gateway 5.0 - Appliance
• Hard-coded credentials

SourceCodester Syllabus-Aligned Learning Management & Examination System db.php hard-coded credentials

• SourceCodester Syllabus-Aligned Learning Management & Examination System
• Hard-coded credentials

liufee FeehiCMS Cookie Validation main-local.php hard-coded key

• liufee FeehiCMS
• Hard-coded credentials
• CWE-320

Tenda CP3 hostapd hard-coded credentials

• Tenda CP3
• Hard-coded credentials

NetBox through 4.7.0 Credential Disclosure via REST and GraphQL APIs

• netbox
• Hard-coded credentials

SiYuan: Non-administrator responses from /api/system/getConf omit three secrets that the configuration-export path explicitly strips, disclosing the session-cookie signing key and the OS username to anonymous readers

• Hard-coded credentials

<0.0.0-20260725132049-2d8b98395a91 · fixed in 0.0.0-20260725132049-2d8b98395a91

SiYuan: The session-cookie signing key (Conf.CookieKey) is returned to anonymous readers by /api/system/getConf

• Hard-coded credentials

<0.0.0-20260725123945-77421530be4a · fixed in 0.0.0-20260725123945-77421530be4a

Tycon Systems TPDIN-Monitor-WEB3 Use of Hard-coded Credentials

• Tycon Systems TPDIN-Monitor-WEB3
• Hard-coded credentials

PassMark PerformanceTest, BurnInTest, and OSForensics Hard-coded Credentials Authentication Bypass via DirectIo64.sys

• PassMark Software PerformanceTest
• PassMark Software BurnInTest
• Hard-coded credentials

QRadar contains hard-coded credentials

• IBM QRadar
• Hard-coded credentials

Onyx 4.6.6 Custom Tool Secret Header Disclosure via Tool Endpoints

• onyx
• Hard-coded credentials

Hard-coded password in Xing Inc. XING CPTrans-ME-X

• Xing Inc. XING CPTrans-ME-X
• Hard-coded credentials

Lightstar｜SmartIT Desktop Manager - Use of Hard-coded Credentials

• Lightstar SmartIT Desktop Manager
• Hard-coded credentials

Lightstar｜SmartIT Desktop Manager - Use of Hard-coded Credentials

• Lightstar SmartIT Desktop Manager
• Hard-coded credentials

Lightstar｜SmartIT Desktop Manager - Use of Hard-coded Credentials

• Lightstar SmartIT Desktop Manager
• Hard-coded credentials

Missing authentication in ASUS Control Center Enterprise (ACC)

• ASUS Control Center Enterprise (ACC)
• Authentication bypass
• Hard-coded credentials

PowerJob Server version 5.1.2 (and likely earlier) uses a predictable JWT signing key for HS256-based authentication.

• Hard-coded credentials

SiYuan: Encrypted-notebook key-derivation material and wrapped notebook keys disclosed to anonymous readers, enabling offline master-password cracking

• Hard-coded credentials

<0.0.0-20260724102025-3bc014c7dc32 · fixed in 0.0.0-20260724102025-3bc014c7dc32

MOOS core-moos through 10.4.0 Remote Process Termination via Hard-Coded Multicast Passphrase

• themoos core-moos
• Hard-coded credentials

Hardcoded Shared RSA-1024 Private Key in Web Login in TP-Link RE305 and Archer C7

• TP-Link Systems Inc. RE305 v3
• TP-Link Systems Inc. Archer C7 v5
• Hard-coded credentials

Vulnerabilities exists in IBM Netezza Software

• IBM Netezza Software
• Hard-coded credentials

Peppermint through 0.5.5 Use of Hard-coded JWT Signing Secret in docker-compose.yml

• peppermint
• Hard-coded credentials

MISP LDAP and LinOTP Authentication Bypass via Empty or Invalid Credentials

• misp
• Hard-coded credentials

Use of Weak Credentials

• B&R Industrial Automation GmbH mapp Services
• Hard-coded credentials

UpSignOn < 7.19.0 Biometric Key Exposure via Windows PasswordVault

• Septeo IT Solutions UpSignOn
• Hard-coded credentials

WWBN AVideo Unauthenticated Password Hash Oracle via encryptPass.json.php

• WWBN AVideo
• Hard-coded credentials