CVE-2026-110667 cemtan sar2html sar2html.py hard-coded credentials

A security flaw has been discovered in cemtan sar2html 4.0.0. Affected by this vulnerability is an unknown functionality of the file sar2html.py. The manipulation of the argument SECRETKEY results in hard-coded credentials. The attack can be executed remotely. The project was informed of the...

CVE-2026-110667 cemtan sar2html sar2html.py hard-coded credentials

A security flaw has been discovered in cemtan sar2html 4.0.0. Affected by this vulnerability is an unknown functionality of the file sar2html.py. The manipulation of the argument SECRETKEY results in hard-coded credentials. The attack can be executed remotely. The project was informed of the...

EUVD-2026-101580

A security flaw has been discovered in cemtan sar2html 4.0.0. Affected by this vulnerability is an unknown functionality of the file sar2html.py. The manipulation of the argument SECRETKEY results in hard-coded credentials. The attack can be executed remotely. The project was informed of the...

CVE-2026-110667

A security flaw exists in cemtan sar2html version 4.0.0 within the sar2html.py file. Manipulating the SECRET_KEY argument leads to the use of hard-coded credentials . This vulnerability can be exploited remotely . While the project was notified via an issue report, no official response or remedia...

CVE-2026-81964

Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally...

CVE-2026-81964

The Windows Update Orchestrator Service is affected by a security feature bypass vulnerability. This issue is caused by the use of hard-coded credentials , which allows an authorized attacker to perform the bypass locally . The vulnerability is associated with CWE-798 . While the impact on integr...

Windows Update Orchestrator Service Security Feature Bypass Vulnerability

Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally...

Microsoft Windows: CVE-2026-81964: Windows Update Orchestrator Service Security Feature Bypass Vulnerability

Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally...

CVE-2026-109566

Rapyd Admin from 9.0.0 before 9.20.0 contains a hard-coded credentials vulnerability that allows remote unauthenticated attackers to gain super-admin access through an AuthSeeder-created admin@laravel account with password admin. The account is seeded by the setup installer and silently re-create...

EUVD-2026-97889

Rapyd Admin from 9.0.0 before 9.20.0 contains a hard-coded credentials vulnerability that allows remote unauthenticated attackers to gain super-admin access through an AuthSeeder-created admin@laravel account with password admin. The account is seeded by the setup installer and silently re-create...

CVE-2026-109566

Rapyd Admin versions 9.0.0 through 9.19.0 are vulnerable to a hard-coded credentials flaw. The AuthSeeder component seeds an admin@laravel account with the password admin during installation and silently re-creates it during every rpd:make run. This allows remote unauthenticated attackers to gain...

CVE-2026-109566 Rapyd Admin 9.0.0 before 9.20.0 Hard-Coded Super-Admin Credentials via AuthSeeder

Rapyd Admin from 9.0.0 before 9.20.0 contains a hard-coded credentials vulnerability that allows remote unauthenticated attackers to gain super-admin access through an AuthSeeder-created admin@laravel account with password admin. The account is seeded by the setup installer and silently re-create...

CVE-2026-109566 Rapyd Admin 9.0.0 before 9.20.0 Hard-Coded Super-Admin Credentials via AuthSeeder

Rapyd Admin from 9.0.0 before 9.20.0 contains a hard-coded credentials vulnerability that allows remote unauthenticated attackers to gain super-admin access through an AuthSeeder-created admin@laravel account with password admin. The account is seeded by the setup installer and silently re-create...

DEBIAN-CVE-2026-108831

A security vulnerability has been detected in meetecho janus-gateway up to 1.4.2. This vulnerability affects unknown code of the file html/demos/admin.js of the component Admin API. Such manipulation leads to hard-coded credentials. The attack can be executed remotely. The exploit has been...

CVE-2026-108831

A security vulnerability has been detected in meetecho janus-gateway up to 1.4.2. This vulnerability affects unknown code of the file html/demos/admin.js of the component Admin API. Such manipulation leads to hard-coded credentials. The attack can be executed remotely. The exploit has been...

CVE-2025-70962

CVE-2025-70962 Use of Hard-coded Credentials in ZOSI C519M IP camera RTSP service Field| Value ---|--- CVE ID| CVE-2025-70962 Vendor| ZOSI Technology Product| ZOSI C519M smart IP camera also listed as model 1NC-519M Affected versions| Firmware V4.2.8.832C01450BA tested build; earlier versions not...

EUVD-2026-97356

A security vulnerability has been detected in meetecho janus-gateway up to 1.4.2. This vulnerability affects unknown code of the file html/demos/admin.js of the component Admin API. Such manipulation leads to hard-coded credentials. The attack can be executed remotely. The exploit has been...

CVE-2026-108831 meetecho janus-gateway Admin API admin.js hard-coded credentials

A security vulnerability has been detected in meetecho janus-gateway up to 1.4.2. This vulnerability affects unknown code of the file html/demos/admin.js of the component Admin API. Such manipulation leads to hard-coded credentials. The attack can be executed remotely. The exploit has been...

CVE-2026-108831

A security vulnerability exists in meetecho janus-gateway versions up to 1.4.2 . The issue resides within the Admin API component, specifically in the html/demos/admin.js file. The root cause is the presence of hard-coded credentials , which allows for remote execution of the attack. Public explo...

CVE-2026-107437: Use of Hard-coded Credentials

GV-E-Map Server V18.2.0A contains a plaintext database password embedded within an application component. The credential can be recovered through static analysis of the distributed binary and may also be exposed in process memory during runtime...