CWE-798: Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.
A kind of CWE-1391 Use of Weak Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- ghost robotics vision 60, ghostrobotics vision 60 firmware +1 moreUse of Hard-coded Credentials vulnerability in Ghost Robotics' Vision 608.7 High
- sauter ey-modulo 5 ecos 5 ecos504/505, ey-modulo 5 modu 5 modu524, ey-modulo 5 modu 5 modu525 +3 more +5 moreSauter: Hard-coded Authentication Credentials7.5 High
- efficientlab workexaminer professionalUsage of Hardcoded FTP Credentials EfficientLab WorkExaminer Professional8.8 High
- moxa edf-g1002-bp series, edr-8010 series, edr-g9010 series +4 more +6 moreAn Use of Hard-coded Credentials vulnerability has been identified in Moxa’s network security...9.9 Critical
- ricetheme felan frameworkFelan Framework <= 1.1.4 - Hardcoded Credentials9.8 Critical
- No product listedHardcoded credentials in gsigel14 ATLAS-EPIC commit f29312c (2025-05-26).6.5 Medium
- creativeitem academy lmsCreativeitem Academy LMS up to and including 6.14 uses a hardcoded default JWT secret for token...9.4 Critical
- ibm security verify access, verify identity access container, verify identity access +2 moreIBM Security Verify Access hard coded credentials8.1 High
- tomofun furbo 360, furbo mini, furbo 360 dog camera firmware +1 more +3 moreTomofun Furbo 360/Furbo Mini MQTT Client Certificate furbo_img hard-coded credentials6.3 Medium
- ossf allstarAllstar Reviewbot has Authentication Bypass via Hard-coded Webhook Secret4.6 Medium
- logo software inc. tigerwings erpHardcoded Credentials in Logo Software's TigerWings ERP5.9 Medium
- poscube hardware software and consulting ltd. co. assistHard-coded Credentials in PosCube's Assist6.3 Medium
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Insecure Installation Credentials10.0 Critical
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Hardcoded GPG Private Key9.4 Critical
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Hardcoded PrinterLogic CA Private Key and Hardcoded Password9.3 Critical
- apeman id71Apeman ID71 system.ini hard-coded credentials9.3 Critical
- doxense watchdocIn DOXENSE WATCHDOC before 6.1.0.5094, private user puk codes can be disclosed for Active...7.1 High
- wedevs wp project managerWordPress WP Project Manager Plugin <= 2.6.25 - Sensitive Data Exposure Vulnerability5.3 Medium
- risto niinemets estonian shipping methods for woocommerceWordPress Estonian Shipping Methods for WooCommerce Plugin <= 1.7.2 - Sensitive Data Exposure Vulnerability5.3 Medium
- essekia helpie faqWordPress Helpie FAQ plugin <= 1.45 - Sensitive Data Exposure vulnerability5.3 Medium
- No product listedInsufficient hardening of the proxyuser account in the AiKaan IoT management platform, combined...9.8 Critical
- No product listedAiKaan Cloud Controller uses a single hardcoded SSH private key and the username `proxyuser` for...9.8 Critical
- creacast creabox managerCreacast Creabox Manager contains a critical authentication flaw that allows an attacker to...8.8 High
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Shared / Hardcoded SSH Host Private Keys in Appliance Image9.3 Critical
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Undocumented Local Account with Hardcoded Password and Passwordless sudo8.6 High
- yandaozi ppressHardcoded credentials in default configuration of PPress 0.0.9.8.8 High
- abb flxeonHardcoded passwords7.3 High
- totolink x2000r firmwareAn issue in TOTOLINK Wi-Fi 6 Router Series Device X2000R-Gh-V2.0.0 allows a remote attacker to...8.0 High
- No product listedAn issue in H3C Magic M Device M2V100R006 allows a remote attacker to execute arbitrary code via...8.0 High
- No product listedAn issue in H3C Device R365V300R004 allows a remote attacker to execute arbitrary code via the...8.0 High
- beyondcart connectorBeyondCart Connector <= 3.0.1 - Missing Configuration of JWT Secret to Unauthenticated Privilege Escalation via determine_current_user Filter9.8 Critical
- masterlifecrm dietlyHardcoded credentials in Dietly v1.25.0 for android allows attackers to gain sensitive information.7.5 High
- baicells spectra lte-u enbCWE-798 Use of Hard-coded Credentials8.4 High
- multicam systems pan-tilt-zoom cameras, multicam-systems mcamii ptz firmware, ptzoptics 12x fixed camera/ndi fixed camera +81 more +83 morePan-Tilt-Zoom cameras default administrative credentials for web interface9.2 Critical
- ecovacs deebot t10 series, deebot t20 series, deebot t30 series +14 more +16 moreECOVACS Vacuum and Base Station Hard-Coded WPA2-PSK2.3 Low
- multicam systems pan-tilt-zoom cameras, multicam-systems mcamii ptz firmware, ptzoptics 12x fixed camera/ndi fixed camera +71 more +73 morePan-Tilt-Zoom cameras hard-coded default passwords with SSH and telnet enabled9.3 Critical
- ecovacs deebot t10 series, deebot t20 series, deebot t30 series +14 more +16 moreECOVACS Vacuum and Base Station Hard-Coded AES Encryption2.3 Low
- freepbx apiapi: Shared OAuth Signing Key Between Different Instances5.1 Medium
- sunpower pvs6Use of Hard-coded Credentials in SunPower PVS69.4 Critical
- tenda f1202, f1202 firmware +1 moreTenda F1202 Administrative shadow hard-coded credentials1.8 Low
- tenda w12, w12 firmware +1 moreTenda W12 Administrative shadow hard-coded credentials1.8 Low
- tenda ac9, ac9 firmware +1 moreTenda AC9 Administrative shadow hard-coded credentials2.0 Low
- cudy lt500e, lt500e firmware +1 moreCudy LT500E Web shadow hard-coded password2.0 Low
- changing clinic image systemChanging｜Clinic Image System - Use of Hard-coded Credentials9.3 Critical
- fnkvision y215 cctv cameraFNKvision Y215 CCTV Camera Firmware passwd hard-coded credentials8.5 High
- carrental project carrentalyeqifu carRental Druid login.html hard-coded credentials6.9 Medium
- tenda ac10, ac10 firmware +1 moreTenda AC10 MD5 Hash shadow hard-coded credentials2.0 Low
cn.hippo4j:hippo4j-coreMavenhippo4j Includes Hard Coded Secret Key in JWT Creation8.8 High- ibm concert, concert software +1 moreIBM Concert Software information disclosure6.2 Medium
- kubernetes image builderVM images built with Kubernetes Image Builder Nutanix or OVA providers use default credentials for Windows images if user did not override7.5 High
- Show moreLoading…