CWE-798: Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.
A kind of CWE-1391 Use of Weak Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- dell command | configure (dcc), command\|configure +1 moreDell Command | Configure (DCC), versions prior to 5.2.3.35 contain a Use of Hard-coded...6.2 Medium
- dell container storage modulesDell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded...9.8 Critical
- dell container storage modulesDell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded...9.8 Critical
- makeplane planePlane: Hardcoded SECRET_KEY and LIVE_SERVER_SECRET_KEY shipped in aio/cli community deployment manifests — session forgery and live-server auth bypass9.8 Critical
- sciphi-ai r2rSciPhi-AI R2R JWT Secret hard-coded credentials6.9 Medium
- topoteretes cogneetopoteretes cognee JWT Signing Key get_api_auth_backend.py get_user_id_by_email hard-coded credentials5.3 Medium
- triggerdotdev trigger.devTrigger.dev before 4.5.4 Hardcoded Coordinator Secret Authentication Bypass via Socket.IO8.3 High
- armatura llc one, one (usa) +1 moreArmatura LLC Armatura One Use of Hard-coded Credentials8.6 High
- geovision inc. gv-eyeGV-Eye Relay Payment API Key Vulnerability7.5 High
- geovision inc. gv-eyeGV-Eye Hardcoded API Key Vulnerability7.5 High
- johnson controls easyio fg- Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FG allows - Pasword...5.6 Medium
- johnson controls easyio fs32: Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FS32 allows :...5.0 Medium
- teledyne flir aware2Hardcoded Passwords in Teledyne FLIR Robots running Aware29.4 Critical
- joyland joyland.aiJoyland AI hard-coded credentials for push notifications6.9 Medium
- elastic endpoint securityWatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory Access9.3 Critical
- hcl software bigfix service managementHCL BigFix Service Management is affected by multiple security vulnerabilities.5.3 Medium
- viidure dashcam android applicationUse of Hard-coded Credentials in Viidure Dashcam Android Application10.0 Critical
- anjvision yssd-rtmp-h5Use of Hard-coded Credentials in Anjvision YSSD-RTMP-H58.7 High
- shenzhen dbit network equipment t-cpe301k 4g mini wifi routerMultiple vulnerabilities in the T-CPE301K 4G Mini WiFi Router from Shenzhen Dbit Network Equipment8.6 High
- refly-ai reflyrefly-ai refly JWT Token app.config.ts hard-coded credentials6.9 Medium
- botslab g980hBotslab G980H Dashcams Use of Hard-coded Credentials7.0 High
- eufy omni c20Use of Hard-coded Credentials in Eufy Omni C206.8 Medium
- sfturing hosp ordersfturing hosp_order jdbc.properties hard-coded credentials6.3 Medium
- openeye apex network video recorder (nvr)OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains a hardcoded, undocumented...6.5 Medium
- ibm financial transaction manager, financial transaction manager (ftm) for redhat openshift +1 moreIBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities8.8 High
- ltsecurity ltk3500sfLTSecurity LTK3500SF Hard-coded Credentials via Telnet/SSH9.2 Critical
- arubanetworks analytics and location engine, hewlett packard enterprise (hpe) ale +1 moreUnauthenticated Remote Unauthorized Access Vulnerability in HPE Networking Analytics and Location Engine (ALE)9.8 Critical
- nvidia infrastructure controller, infra controller +1 moreNVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause...9.8 Critical
- zte smartlifeHardcoded Key Vulnerability in ZTE SmartLife APP6.2 Medium
- aiyiyi121 sxdevopsaiyiyi121 SxDevOps Settings settings.py hard-coded credentials6.9 Medium
- aiyiyi121 sxdevopsaiyiyi121 SxDevOps services.py ensure_default_superuser hard-coded credentials6.9 Medium
- ibm guardium data protectionIBM Guardium Data Protection is affected by multiple vulnerabilities.8.8 High
- anycableAnyCable: Telemetry Subsystem Contains Hardcoded Authentication Token and Transmits CLI Arguments Including Secrets5.9 Medium
- bransys eldUse of Hard-coded Credentials in Bransys ELD6.9 Medium
- bransys eldUse of Hard-coded Credentials in Bransys ELD8.7 High
- labredescefetrj wegiaWeGIA: Hardcoded Secret Key Backdoor — Mass Data Destruction via deletar_socios.php9.1 Critical
- dell openmanage server administrator, openmanage server administrator managed node (patch) for windows, openmanage server administrator managed node for rhel 8.10 +3 more +5 moreDell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded...7.3 High
- feast-dev feastFeast through 0.66.0 Authentication Bypass via Unverified Token9.3 Critical
- digital watchdog va1g4 recorder, vg4 recorder, vmax a1 g4 dvr +2 more +4 moreUse of Hard-coded Credentials in Digital Watchdog VMAX DVR and NVR Product Lineups8.7 High
- digital watchdog va1g4 recorder, vg4 recorder, vmax a1 g4 dvr +2 more +4 moreUse of Hard-coded Credentials in Digital Watchdog VMAX DVR and NVR Product Lineups9.4 Critical
- openbmc phosphor-net-ipmidOpenBMC IPMI Authentication Bypass via Default userKey and Stale Challenge Value8.1 High
- No product listedTOTOLINK X5000R V9.1.0cu.2415_B20250515 was discovered to contain a hardcoded password for root...9.8 Critical
- dromara orion-visordromara orion-visor ExposeApiAspect.java ExposeApiAspect.beforeExposeApi hard-coded credentials6.9 Medium
- carecam anjia ajl33pc0801 firmwareCareCam Pro IP Cameras Use of Hard-coded Credentials7.0 High
- No product listedUse of hardcoded default credentials in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837...9.8 Critical
- lenovo health applicationA vulnerability was reported in Lenovo Health Android Application, distributed exclusively in the...9.3 Critical
- hikvision ds-kd8003, ds-kd8005, ds-kv6103 +10 more +12 moreThere is an Improper Encryption Configuration Vulnerability in some Hikvision Intercom Products....6.1 Medium
- dreryk gabinetUse of Hard-coded Credentials in drEryk Gabinet6.9 Medium
- drupal saml sso - service providerSAML SSO - Service Provider - Moderately critical - Embedded credentials - SA-CONTRIB-2026-1485.3 Medium
- softish c6 ear camera, earvision android application +1 moreSoftish C6 Ear Camera and EarVision Android Application Use of Hard-coded Credentials8.7 High
- Show moreLoading…