Elph Mobile Hard-coded Key Unauthorized Access

The vulnerability in the Elph Mobile unified communications platform is related to the use of a hard-coded cryptographic key. Exploitation of this vulnerability could allow an attacker to gain unauthorized access to sensitive information...

TOTOLINK CP450 v4.1.0cu.747_B20191224 - Hard-Coded Password Vulnerability

A critical vulnerability has been discovered in TOTOLINK CP450 version 4.1.0cu.747B20191224. This vulnerability affects an unknown part of the file /webcste/cgi-bin/product.ini of the Telnet Service component. The issue stems from the use of a hard-coded password, which can be exploited remotely...

ZyXel USG - Hardcoded Credentials

A hardcoded credential vulnerability was identified in the 'zyfwp' user account in some Zyxel firewalls and AP controllers. The account was designed to deliver automatic firmware updates to connected access points through FTP. id: CVE-2020-29583 info: name: ZyXel USG - Hardcoded Credentials autho...

ccs

Code Credential Scanner This script is intended to scan a large, diverse codebase for hard-coded credentials, or credentials present in configuration files. These represent a serious security issue, and can be extremely hard to detect and manage. The specific focus of this script is to create a...

CVE-2026-19124

IBM API Connect 10.0.8.0 through 10.0.8.12 could allow an attacker with access to stored data to decrypt sensitive credentials due to the use of a hard-coded cryptographic key. The key protecting stored credentials is built into the product, so credentials could be decrypted if the stored data is...

CVE-2026-17310

IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to the use of a hard-coded cryptographic key...

CVE-2026-19124

IBM API Connect versions 10.0.8.0 through 10.0.8.12 are vulnerable to the decryption of sensitive credentials. The root cause is the use of a hard-coded cryptographic key built into the product to protect stored data. An attacker who obtains access to this stored data can use the hard-coded key t...

CVE-2026-19124 Multiple Vulnerabilities in IBM API Connect

IBM API Connect 10.0.8.0 through 10.0.8.12 could allow an attacker with access to stored data to decrypt sensitive credentials due to the use of a hard-coded cryptographic key. The key protecting stored credentials is built into the product, so credentials could be decrypted if the stored data is...

EUVD-2026-118925

IBM API Connect 10.0.8.0 through 10.0.8.12 could allow an attacker with access to stored data to decrypt sensitive credentials due to the use of a hard-coded cryptographic key. The key protecting stored credentials is built into the product, so credentials could be decrypted if the stored data is...

CVE-2026-17403

The IBM API Connect software versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are affected by multiple vulnerabilities. These issues arise from the use of hard-coded credentials , which could allow a remote attacker to gain full administrative control over the system. No specific...

EUVD-2026-118783

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full administrative control due to the use of hard-coded credentials...

EUVD-2026-118745

IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full administrative control due to the use of hard-coded credentials...

CVE-2026-17360

IBM API Connect versions 12.1.0.0 through 12.1.1.2 are affected by multiple vulnerabilities. A remote attacker can gain full administrative control because the software utilizes hard-coded credentials (CWE-798). The CVSS 3.1 score is 9.8 (CRITICAL) , indicating high impact on confidentiality, int...

EUVD-2026-118741

IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a local attacker to obtain sensitive information due to the use of a hard-coded cryptographic key...

CVE-2026-17356

IBM API Connect versions 12.1.0.0 through 12.1.1.2 are vulnerable to multiple issues where a local attacker could obtain sensitive information . This is caused by the use of a hard-coded cryptographic key (CWE-321). No specific exploit details or remediation steps are provided in the documents.

CVE-2026-17310 Multiple Vulnerabilities in IBM API Connect

IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to the use of a hard-coded cryptographic key...

CVE-2026-17310

IBM API Connect versions 12.1.0.0 through 12.1.1.2 are impacted by a vulnerability that could allow a remote attacker to obtain sensitive information . The root cause is the use of a hard-coded cryptographic key . No specific exploit details or remediation steps are provided in the documents.

EUVD-2026-118701

IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to the use of a hard-coded cryptographic key...

EVlink City < R8 V3.4.0.1 - Authentication Bypass

A CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1, EVlink Parking EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1, and EVlink Smart Wallbox EVB1A all versions prior to R8 V3.4.0.1 that could allow an attacker t...

GitLab CE/EE - Hard-Coded Credentials

GitLab CE/EE contains a hard-coded credentials vulnerability. A hardcoded password was set for accounts registered using an OmniAuth provider e.g. OAuth, LDAP, SAML, allowing attackers to potentially take over accounts. This template attempts to passively identify vulnerable versions of GitLab...