CVE-2026-61421

Dell Container Storage Modules (CSM) versions prior to 1.18.0 are vulnerable to a Use of Hard-coded Cryptographic Key (CWE-798) in the karavi-authorization component's JWT authentication. An unauthenticated remote attacker who knows the publicly available signing secret can forge authentication t...

CVE-2026-54472

Dell Container Storage Modules (CSM) , versions prior to 1.18.0 , are vulnerable to a hard-coded credentials flaw in the CSM Authorization module (specifically csm-docs ). An unauthenticated remote attacker can exploit this to forge cryptographically valid administrative tokens, enabling unauthor...

EUVD-2026-93434

Dell Container Storage Modules, versions prior to 1.18.0, contains an Use of Hard-coded Credentials vulnerability in the csm-docs. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.9.8...

CVE-2026-54472

Dell Container Storage Modules, versions prior to 1.18.0, contains an Use of Hard-coded Credentials vulnerability in the csm-docs. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.9.8...

CVE-2026-63688

Dell Container Storage Modules CSM, versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-storage gRPC server. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to...

EUVD-2026-93428

Dell Container Storage Modules CSM, versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-storage gRPC server. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to...

CVE-2026-105834

Rundeck versions before 6.2.0 are vulnerable to a path traversal vulnerability in the File Resource Model Source . This flaw allows users with only the project configure ACL to read arbitrary server files by setting resources.source.N.config.file to an absolute path. Attackers can exploit this vi...

CVE-2026-46376

CVE-2026-46376 — FreePBX Unauthenticated UCP Access via Hard-Coded Credentials A critical vulnerability in FreePBX's User Management userman module allows unauthenticated attackers to access the User Control Panel UCP using hard-coded credentials that are embedded during the UCP generic template...

CVE-2026-85153

This vulnerability exists in the Schmooze app due to the use of hardcoded credentials and cryptographic keys in the client application. An unauthenticated remote attacker could exploit this vulnerability by decompiling the distributed application package and extracting the embedded credentials an...

EUVD-2026-93017

This vulnerability exists in the Schmooze app due to the use of hardcoded credentials and cryptographic keys in the client application. An unauthenticated remote attacker could exploit this vulnerability by decompiling the distributed application package and extracting the embedded credentials an...

CVE-2026-85153 Information Disclosure Vulnerability in Schmooze dating mobile Application

This vulnerability exists in the Schmooze app due to the use of hardcoded credentials and cryptographic keys in the client application. An unauthenticated remote attacker could exploit this vulnerability by decompiling the distributed application package and extracting the embedded credentials an...

CVE-2026-85153 Information Disclosure Vulnerability in Schmooze dating mobile Application

This vulnerability exists in the Schmooze app due to the use of hardcoded credentials and cryptographic keys in the client application. An unauthenticated remote attacker could exploit this vulnerability by decompiling the distributed application package and extracting the embedded credentials an...

CVE-2026-85153

The Schmooze dating mobile application contains a vulnerability caused by the use of hardcoded credentials and cryptographic keys within the client application. An unauthenticated remote attacker can exploit this by decompiling the distributed application package to extract the embedded secrets. ...

Cleartext Storage of SupportLink HTTP Proxy Credentials in Diagnostic Support Bundles

: An information disclosure vulnerability exists in the SupportLink diagnostic collection utilities of Brocade Fabric OS versions before 10.0.1. When SupportLink is configured to use an authenticated HTTP proxy, the system stores the full proxy URL. Anyone with access to the diagnostic support...

Linux Distros Unpatched Vulnerability : CVE-2026-59785

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Host search in Frontend allows filtering by fields that are not displayed, including stored IPMI and PSK credentials. A user with read access can guess a...

PT-2026-106360

Name of the Vulnerable Software and Affected Versions Cloud Foundry UAA affected versions not specified Description Improper authentication in the OAuth token endpoint allows a remote, authenticated attacker with a valid user access token to obtain a fully-privileged client credentials token for...

CVE-2026-96890: Server-Side Request Forgery (SSRF)

A Server-Side Request Forgery SSRF vulnerability was identified in GitHub Enterprise Server that allowed a repository contributor to cause the appliance to issue requests to attacker-controlled internal hosts, which could be chained to achieve remote code execution on the appliance. The secret...

CVE-2026-67270: Improper Certificate Validation

Dell Container Storage Modules CSM versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability in the proxy-server component. An unauthenticated adjacent network attacker could potentially exploit this vulnerability, leading to information exposure of storage backend...

CVE-2026-61421: Use of Hard-coded Credentials

Dell Container Storage Modules, versions prior to 1.18.0, contains an Use of Hard-coded Credentials vulnerability in the CSM Authorization. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-54472: Use of Hard-coded Credentials

Dell Container Storage Modules, versions prior to 1.18.0, contains an Use of Hard-coded Credentials vulnerability in the csm-docs. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.9.8...