Hard-coded credentials.

Server-side request forgery in Eclipse Foundation Eclipse Che

• Eclipse Foundation Eclipse Che
• Path traversal
• Hard-coded credentials

SciPhi-AI R2R JWT Secret hard-coded credentials

• SciPhi-AI R2R
• Hard-coded credentials

topoteretes cognee JWT Signing Key get_api_auth_backend.py get_user_id_by_email hard-coded credentials

• topoteretes cognee
• Hard-coded credentials

Trigger.dev: V1 coordinator default-secret unauth Socket.IO

• Information disclosure
• Hard-coded credentials

<4.5.4 · fixed in 4.5.4

Armatura LLC Armatura One Use of Hard-coded Cryptographic Key

• Armatura LLC Armatura One
• Armatura LLC Armatura One (USA)
• Hard-coded credentials

Armatura LLC Armatura One Use of Hard-coded Credentials

• Armatura LLC Armatura One
• Armatura LLC Armatura One (USA)
• Hard-coded credentials

Monta monta.app Insufficiently Protected Credentials

• monta.app
• Hard-coded credentials

GV-Eye Relay Payment API Key Vulnerability

• GeoVision Inc. GV-Eye
• Information disclosure
• Hard-coded credentials

GV-Eye Hardcoded API Key Vulnerability

• GeoVision Inc. GV-Eye
• Information disclosure
• Hard-coded credentials

Hard-coded credentials in Johnson Controls EasyIO FG

• Johnson Controls EasyIO FG
• Hard-coded credentials

Hard-coded cryptographic key in Johnson Controls EasyIO FS32

• Johnson Controls EasyIO FS32
• Hard-coded credentials

PictShare < 3.7.1 Sensitive Information Disclosure via info API

• HaschekSolutions pictshare
• Hard-coded credentials

Hard-coded credentials in Johnson Controls EasyIO FS32

• Johnson Controls EasyIO FS32
• Hard-coded credentials

Hardcoded Passwords in Teledyne FLIR Robots running Aware2

• Teledyne FLIR Aware2
• Hard-coded credentials

Joyland AI hard-coded credentials for push notifications

• Joyland.ai
• Hard-coded credentials

WatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory Access

• WatchGuard Endpoint Security
• Authentication bypass
• Hard-coded credentials

HCL BigFix Service Management is affected by multiple security vulnerabilities.

• HCL Software HCL BigFix Service Management
• Information disclosure
• Hard-coded credentials

n8n before 2.39.6 and 2.40.x before 2.40.1 Credentials Leak via preAuthentication Hook

• n8n
• Hard-coded credentials

A hard-coded JWT signing secret key may allow administrative functions to be abused using fraudulently generated Bearer tokens

• Hitachi Industrial Equipment Systems Hitachi Coding Software Suite
• Hard-coded credentials

Newsletter <= 9.3.9 - Unauthenticated Insufficiently Protected Credentials via '/tnp/l/' Click-Tracking REST Endpoint (Raw Subscriber Token Cookie Disclosure)

• satollo Newsletter – Send awesome emails from WordPress
• Hard-coded credentials

Insufficiently protected credentials in JetBrains YouTrack

• JetBrains YouTrack
• Hard-coded credentials

AJA HELO Plus < 2.1.7 Hardcoded AES Passphrase for Diagnostics Export Bundle

• AJA Video Systems HELO Plus
• Hard-coded credentials

Information disclosure in BVMS 4.5 up to 12.3

• IQSIGHT BVMS
• Hard-coded credentials

AiSOC 7.5.0 before 12.0.0 Authentication Bypass via Hard-coded JWT Secret

• beenuar AiSOC
• Hard-coded credentials

Use of Hard-coded Credentials in Viidure Dashcam Android Application

• Viidure Dashcam Android Application
• Hard-coded credentials

Use of Weak Credentials in Anjvision YSSD-RTMP-H5

• Anjvision YSSD-RTMP-H5
• Hard-coded credentials

Insufficiently Protected Credentials in Anjvision YSSD-RTMP-H5

• Anjvision YSSD-RTMP-H5
• Hard-coded credentials

Use of Hard-coded Credentials in Anjvision YSSD-RTMP-H5

• Anjvision YSSD-RTMP-H5
• Hard-coded credentials

Weak root password in EVbee DC 80

• EVbee DC 80
• Hard-coded credentials

Multiple vulnerabilities in the T-CPE301K 4G Mini WiFi Router from Shenzhen Dbit Network Equipment

• Shenzhen Dbit Network Equipment T-CPE301K 4G Mini WiFi Router
• Hard-coded credentials

Apache Airflow's Snowflake provider did not validate the connection's `account` and `region` fields before interpolating them into request URLs. The SQL API endpoint is built as `https://{account}....

• Hard-coded credentials

<6.18.0 · fixed in 6.18.0

Netcore NAP930 Backup/Restore backup_common.sh hard-coded key

• Netcore NAP930
• Hard-coded credentials
• CWE-320

Hard-coded password in Dell Live Optics Collector

• Dell Live Optics Collector
• Hard-coded credentials

Use of Shared Cryptographic Key in mH-DEVELOPER

• F&F Filipowski mH-DEVELOPER
• Hard-coded credentials

refly-ai refly JWT Token app.config.ts hard-coded credentials

• refly
• Hard-coded credentials

Nezha before 2.2.7 Information Disclosure via /api/v1/profile

• nezha
• Hard-coded credentials

OpenClaw before 2026.8.1 Credential Exposure via Endpoint Override

• OpenClaw
• Hard-coded credentials

Cross-origin credential leak in HTTP stream wrapper redirects

• PHP
• Information disclosure
• Hard-coded credentials

Zammad: Sensitive Information Exposure in Integration Administration API

• zammad
• Information disclosure
• Hard-coded credentials

zhistaredu StarTraining JWT Token application.yml UserLoginService.createToken hard-coded password

• zhistaredu StarTraining
• Hard-coded credentials
• CWE-255

Hard-coded cryptographic key in Tohoku Electric Power Company, Incorporated Tohoku Electric Power "Yorisou e… and others

• Tohoku Electric Power Company, Incorporated Tohoku Electric Power "Yorisou e Net" Android App
• Tohoku Electric Power Company, Incorporated Tohoku Electric Power "Yorisou e Net" iOS App
• Hard-coded credentials

Botslab G980H Dashcams Use of Hard-coded Credentials

• Botslab G980H
• Hard-coded credentials

Botslab G980H Dashcams Use of Hard-coded Cryptographic Key

• Botslab G980H
• Hard-coded credentials

Botslab G980H Dashcams Use of Weak Credentials

• Botslab G980H
• Hard-coded credentials

Use of Hard-coded Credentials in Eufy Omni C20

• Eufy Omni C20
• Hard-coded credentials

authentik: Stored credentials are readable with view permission alone

• authentik
• Information disclosure
• Hard-coded credentials

Termix: Hardcoded default key encrypts all OIDC/WebAuthn users' stored SSH credentials — full offline decryption from a database copy

• Termix
• Hard-coded credentials

Araxis Merge insufficiently protected credentials

• Araxis Merge
• Hard-coded credentials

DataStage on Cloud Pak for Data has several vulnerabilities

• IBM DataStage on Cloud Pak for Data
• Hard-coded credentials

sfturing hosp_order jdbc.properties hard-coded credentials

• sfturing hosp_order
• Hard-coded credentials

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

• IBM Financial Transaction Manager (FTM) for RedHat OpenShift
• Hard-coded credentials

Sensitive data exposure

• Zohocorp ManageEngine Applications Manager
• Hard-coded credentials

Hard-coded credentials in OpenEye Apex Network Video Recorder (NVR)

• OpenEye Apex Network Video Recorder (NVR)
• Hard-coded credentials

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

• IBM Financial Transaction Manager (FTM) for RedHat OpenShift
• Hard-coded credentials

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

• IBM Financial Transaction Manager (FTM) for RedHat OpenShift
• Hard-coded credentials

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

• IBM Financial Transaction Manager (FTM) for RedHat OpenShift
• Hard-coded credentials

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

• IBM Financial Transaction Manager (FTM) for RedHat OpenShift
• Hard-coded credentials

LTSecurity LTK3500SF Hard-coded Credentials via Telnet/SSH

• LTSecurity LTK3500SF
• Hard-coded credentials

Unauthenticated Remote Unauthorized Access Vulnerability in HPE Networking Analytics and Location Engine (ALE)

• Hewlett Packard Enterprise (HPE) ALE
• Hard-coded credentials

Hard-coded password in NVIDIA Infrastructure Controller

• NVIDIA Infrastructure Controller
• Hard-coded credentials