CVE-2026-79959

The Botslab G980H dash camera firmware is vulnerable to use of hard-coded credentials because it contains a root account password that cannot be modified by the user. An attacker with physical access to the device or the ability to obtain the firmware can recover these credentials to gain root ac...

CVE-2026-93290

Omni C20 uses hard-coded credentials that could allow an attacker to monitor log files to obtain credentials to access information like mapping data...

CVE-2026-75558 Botslab G980H Dashcams Use of Hard-coded Cryptographic Key

The Botslab G980H dash camera firmware uses a hard-coded cryptographic key and initialization vector to protect WiFi credentials communicated by the device. An attacker who obtains the protected credential and extracts the cryptographic material from the firmware could recover the WiFi password a...

CVE-2026-75558 Botslab G980H Dashcams Use of Hard-coded Cryptographic Key

The Botslab G980H dash camera firmware uses a hard-coded cryptographic key and initialization vector to protect WiFi credentials communicated by the device. An attacker who obtains the protected credential and extracts the cryptographic material from the firmware could recover the WiFi password a...

EUVD-2026-86459

The Botslab G980H dash camera firmware uses a hard-coded cryptographic key and initialization vector to protect WiFi credentials communicated by the device. An attacker who obtains the protected credential and extracts the cryptographic material from the firmware could recover the WiFi password a...

CVE-2026-75558

The Botslab G980H dash camera firmware contains a vulnerability due to the use of a hard-coded cryptographic key and initialization vector. This flaw is used to protect WiFi credentials communicated by the device. An attacker capable of extracting cryptographic material from the firmware and obta...

CVE-2026-82716

The Botslab G980H dash camera firmware contains a vulnerability where diagnostic logs generated during the support process include sensitive configuration information , such as WiFi credentials . These logs remain accessible on removable storage after the support operation is finished. An unauthe...

CVE-2026-82716 Botslab G980H Dashcams Insertion of Sensitive Information into Log File

The Botslab G980H dash camera firmware includes sensitive configuration information, including WiFi credentials, in diagnostic logs generated during the support process. These logs remain accessible on removable storage after the support operation has completed. An unauthenticated attacker with...

EUVD-2026-86456

The Botslab G980H dash camera firmware includes sensitive configuration information, including WiFi credentials, in diagnostic logs generated during the support process. These logs remain accessible on removable storage after the support operation has completed. An unauthenticated attacker with...

CVE-2026-88761 Botslab G980H Dashcams Use of Weak Credentials

The Botslab G980H dash camera firmware generates the default WiFi password using predictable device information, portions of which are advertised by the product. An unauthenticated attacker within WiFi range could potentially determine the remaining password characters through limited guessing an...

CVE-2026-88761 Botslab G980H Dashcams Use of Weak Credentials

The Botslab G980H dash camera firmware generates the default WiFi password using predictable device information, portions of which are advertised by the product. An unauthenticated attacker within WiFi range could potentially determine the remaining password characters through limited guessing an...

CVE-2026-88761

The Botslab G980H dash camera firmware contains a vulnerability where the default WiFi password is generated using predictable device information . Portions of this information are advertised by the product, potentially allowing an unauthenticated attacker within WiFi range to determine the remai...

CVE-2026-93290 Use of Hard-coded Credentials in Eufy Omni C20

Omni C20 uses hard-coded credentials that could allow an attacker to monitor log files to obtain credentials to access information like mapping data...

CVE-2026-93290

The Eufy Omni C20 is affected by a vulnerability involving the use of hard-coded credentials . An attacker who is able to monitor the device's log files could obtain these credentials to gain unauthorized access to sensitive information, such as mapping data . No specific remediation or patch ver...

EUVD-2026-86411

Omni C20 uses hard-coded credentials that could allow an attacker to monitor log files to obtain credentials to access information like mapping data...

CVE-2026-93290 Use of Hard-coded Credentials in Eufy Omni C20

Omni C20 uses hard-coded credentials that could allow an attacker to monitor log files to obtain credentials to access information like mapping data...

CVE-2026-77294

TREK is a collaborative travel planner. Prior to 3.3.0, TREK allows an authenticated user to store an attacker-controlled llmbaseurl through the settings API when the LLMPARSING feature is enabled. Write permission to the target trip instance is required to trigger the vulnerable AI-assisted impo...

CVE-2026-82371

Brocade SANnav versions before 3.0.1a are vulnerable to a plaintext exposure of sensitive authentication data within the discovery service log files . This flaw allows individuals with file read access to retrieve administrative switch credentials and active session tokens . An attacker who gains...

CVE-2026-82371 Plaintext exposure of sensitive authentication data in SANnav discovery service log files

Plaintext exposure of sensitive authentication data in Brocade SANnav discovery service log files enables individuals with file read access to retrieve administrative switch credentials and active session tokens. An attacker with access to system logs or support bundles can leverage exposed...

EUVD-2026-86349

Plaintext exposure of sensitive authentication data in Brocade SANnav discovery service log files enables individuals with file read access to retrieve administrative switch credentials and active session tokens. An attacker with access to system logs or support bundles can leverage exposed...