CWE-321: Use of Hard-coded Cryptographic Key
The product uses a hard-coded, unchangeable cryptographic key.
A kind of CWE-798 Use of Hard-coded Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- ibm api connect Multiple Vulnerabilities in IBM API Connect 8.7 High
- ibm api connect Multiple Vulnerabilities in IBM API Connect 6.5 Medium
- trellix dlp on-prem extensions Hard-coded Cryptographic Key vulnerability exists in the DLP on-prem extensions version 11.13.1... 6.0 Medium
- apache software foundation ofbiz Apache OFBiz: Use of Hard-coded Cryptographic Key in JWT Token Authentication Enables Unauthenticated Administrative Access No score
- quest foglight for databases Quest Foglight for Databases EncryptionUtil Hardcoded Encyption Key Local Privilege Escalation Vulnerability 7.8 High
- dell os recovery tool Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Hard-coded Cryptographic Key... 2.4 Low
- anji-plus aj-report AJ-Report through 1.7.1 Authentication Bypass leading to RCE via Share-Token 9.3 Critical
- huajian123 ng-antd-admin ng-antd-admin: Hardcoded JWT Secret allows Authentication Bypass in ng-antd-admin 9.8 Critical
- dell openmanage enterprise Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Use of Hard-coded Cryptographic... 7.3 High
- aidotnet opendeepwiki OpenDeepWiki through 2.0.6 Hard-coded JWT Signing Key Admin Token Forgery 9.3 Critical
- qnap systems inc. hbs 3 hybrid backup sync, hybrid backup sync +1 more Hard-coded Cryptographic Key #2 8.7 High
- qnap systems inc. hbs 3 hybrid backup sync, hybrid backup sync +1 more Hard-coded Cryptographic Key #1 8.7 High
- dell powerprotect data domain Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release... 9.8 Critical
- tp-link systems inc. archer c7 v5, re305 v3 +1 more Hardcoded AES-128 Key and Fixed IV in Configuration Backup Encryption in TP-Link RE305 and Archer C7 6.9 Medium
- buqiyuan nest-admin nest-admin before 1.0.1 Authentication Bypass via Hardcoded JWT Secret 9.3 Critical
- moxa oncell g3150a-lte series Static HTTPS private key and CA private key in firmware in OnCell G3150A-LTE Series 7.7 High
- rajnandan1 kener Kener 3.0.0 before 4.1.10 Authentication Bypass via Hardcoded Fallback JWT Secret 9.2 Critical
- octoprint OctoPrint Flask Secret Key hard-coded key 6.9 Medium
- johnson controls kantech entrapass Use of hard-coded cryptographic key vulnerability in Johnson Controls Kantech Entrapass allows... 8.5 High
- sciener ttlock TTLock Android App < 9.8.260718 Hardcoded BLE Pairing Key Exposure 8.6 High
- creditnirvana agentic ai call centre Hardcoded API Key Vulnerability in CreditNirvana Agentic AI Call Centre application 8.7 High
- splunk, splunk enterprise +1 more Use of Hard-coded Cryptographic Key in the PostgreSQL Sidecar Service in Splunk Enterprise 8.8 High
- tp-link systems inc. archer c6 v2 Hardcoded AES encryption key in Archer C6 5.9 Medium
- ibm guardium data protection IBM Guardium Data Protection is affected by a security vulnerability 8.1 High
- minio MinIO Embedded Console common-main.go SessionTokenAuthenticate hard-coded key 6.9 Medium
- netease-youdao lobsterai LobsterAI before 2026.10.16 Hardcoded Password in Provider API Key Export 6.8 Medium
- shaiwz data-platform-open data-platform-open through commit efeacd3 Hardcoded AES Key for Datasource Passwords 7.1 High
- databufflabs databuff DataBuff ai-apm-web through 0.1.10 Authentication Bypass via Hardcoded HMAC Secret 9.3 Critical
- suyuan32 simple-admin-core Simple Admin Core through 1.8.7 Hard-Coded JWT Secret Authentication Bypass 9.3 Critical
- fastapiadmin FastapiAdmin through 3.0 Hard-Coded JWT Secret Privilege Escalation 8.7 High
- openbmb staffdeck OpenBMB StaffDeck through 0.5.6 Authentication Bypass via Hard-Coded Session Secret 9.2 Critical
- seriawei zkeacms ZKEACMS through 4.4 Authentication Bypass via Hard-Coded JWT Signing Key 8.8 High
- qaiu netdisk-fast-download netdisk-fast-download through 0.4.8 Credential Disclosure via /v2/randomAuth 8.7 High
- moxa aig-302 series Shared Hard-coded Root CA Private Key 8.6 High
- opsre go-ldap-admin go-ldap-admin through 0.6.2 Hard-Coded RSA Private Key via /base/decryptpwd 8.2 High
- energizelab firmwareupdater EnergizeLab FirmwareUpdater Universal Hard-Coded AES Key 7.8 High
- hitachi vantara remot ops agent Token Signing Key Allows Unauthenticated Administrative Access 9.1 Critical
- seaweedfs SeaweedFS: Hard-coded SSH host key can be presented by certain standalone SFTP Helm deployments 7.0 High
- wwwlike vlife vlife through 2.0.1 Authentication Bypass via Hardcoded JWT Secret in TokenUtil 9.3 Critical
- trellix agent An Hardcoded Cryptographic Key vulnerability existed in Trellix Agent 5.8.4 via mfecryptc.dll... 6.9 Medium
- themerex snowy Snowy 3.6.5 Hard-coded Download Signature Key Allows Unauthenticated File Download 6.3 Medium
- fortinet fortisandbox, fortisandbox cloud +1 more A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1,... 4.9 Medium
- ibm mcp-context-forge MCP Context Forge: Hardcoded default JWT_SECRET_KEY shipped in source and .env.example enables pre-authentication platform admin token forgery 9.8 Critical
- huawei openubmc Huawei Default SNMPv3 USM key 8.6 High
- netease cloud music for windows NetEase Cloud Music Weak Encryption via eapi/xeapi 8.2 High
- progress software corporation marklogic server Server-side request forgery and hard-coded key in Progress MarkLogic Server OpsDirector 7.5 High
- progress sharefile storage zones controller Untrusted request routing and forged acknowledgements permit copy-workflow manipulation in Progress ShareFile Storage Zones Controller 4.0 Medium
- zkteco biotime ZKTeco BioTime hard-coded key 6.9 Medium
- scisharp botsharp BotSharp through 5.2.0 Authentication Bypass via Hard-Coded JWT Signing Key 9.3 Critical
- broadcom brocade active support connectivity gateway, brocade active support connectivity gateway +1 more A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to... 8.6 High
- Show olderLoading…