CVE-2026-76298

In Splunk Enterprise versions below 10.4.4 and 10.2.8 , a security flaw exists in the PostgreSQL sidecar service due to the use of a hard-coded cryptographic key . Specifically, the service derives a privileged database password from the search head cluster identifier, which is exposed in search ...

CVE-2026-76298 Use of Hard-coded Cryptographic Key in the PostgreSQL Sidecar Service in Splunk Enterprise

In Splunk Enterprise versions below 10.4.4 and 10.2.8, a user who does not hold the "admin" or "power" Splunk roles could derive the PostgreSQL sidecar database superuser password and run arbitrary operating system commands as the user account running Splunk Enterprise on search head cluster...

EUVD-2026-106863

IBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of a hard-coded cryptographic key...

CVE-2026-82891

IBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of a hard-coded cryptographic key...

CVE-2026-82891

IBM Guardium Data Protection versions 12.1 and 12.2 are affected by a security vulnerability (CVE-2026-82891 ) caused by the use of a hard-coded cryptographic key (CWE-321). This flaw could allow a remote attacker to obtain sensitive information . To remediate this issue, IBM encourages customers...

CVE-2026-82891 IBM Guardium Data Protection is affected by a security vulnerability

IBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of a hard-coded cryptographic key...

CVE-2026-113466

A security vulnerability has been detected in MinIO up to RELEASE.2025-10-15T17-29-55Z. This issue affects the function globalDeploymentID/SessionTokenAuthenticate of the file cmd/common-main.go of the component Embedded Console. Such manipulation leads to use of hard-coded cryptographic key . It...

EUVD-2026-105033

A security vulnerability has been detected in MinIO up to RELEASE.2025-10-15T17-29-55Z. This issue affects the function globalDeploymentID/SessionTokenAuthenticate of the file cmd/common-main.go of the component Embedded Console. Such manipulation leads to use of hard-coded cryptographic key . It...

CVE-2026-113404

WebITR developed by Uniong has a Insecure Deserialization vulnerability. Authenticated remote attackers can use the hard-coded cryptographic key to craft and submit malicious serialized data, thereby executing arbitrary code on the server...

EUVD-2026-104808

WebITR developed by Uniong has a Insecure Deserialization vulnerability. Authenticated remote attackers can use the hard-coded cryptographic key to craft and submit malicious serialized data, thereby executing arbitrary code on the server...

CVE-2026-113404

The software WebITR , developed by Uniong , contains an Insecure Deserialization vulnerability (CWE-502). Authenticated remote attackers can exploit this by utilizing a hard-coded cryptographic key to craft and submit malicious serialized data. Successful exploitation allows the attacker to achie...

CVE-2026-113404 Uniong｜WebITR - Insecure Deserialization

WebITR developed by Uniong has a Insecure Deserialization vulnerability. Authenticated remote attackers can use the hard-coded cryptographic key to craft and submit malicious serialized data, thereby executing arbitrary code on the server...

Security Bulletin: IBM Guardium Data Protection is affected by a security vulnerability (CVE-2026-82891)

Summary IBM Guardium Data Protection has addressed this vulnerability in an update. Vulnerability Details CVEID:CVE-2026-82891 DESCRIPTION: IBM Guardium Data Protection could allow a remote attacker to obtain sensitive information due to use of a hard-coded cryptographic key. CWE:CWE-321: Use of...

CVE-2026-109813

A hard-coded cryptographic key vulnerability exists in the /usr/bin/sysman of some of Moxa's industrial computing products. An unauthenticated attacker with adjacent network access could exploit the exposed private key material to compromise the confidentiality and integrity of communications...

EUVD-2026-102594

A hard-coded cryptographic key vulnerability exists in the /usr/bin/sysman of some of Moxa's industrial computing products. An unauthenticated attacker with adjacent network access could exploit the exposed private key material to compromise the confidentiality and integrity of communications...

CVE-2026-109813

A hard-coded cryptographic key vulnerability exists in the /usr/bin/sysman component of certain Moxa industrial computing products . An unauthenticated attacker with adjacent network access can exploit the exposed private key material to compromise the confidentiality and integrity of communicati...

EUVD-2026-102507

BillionMail through 4.9 contains a hard-coded cryptographic key vulnerability that allows unauthenticated attackers to forge unsubscribe and subscribe-confirm JWTs by computing the key from shipped configuration constants. Attackers can submit forged tokens to /api/unsubscribe, /api/unsubscribene...

CVE-2026-111696: Use of Hard-coded Cryptographic Key

data-platform-open through commit efeacd3 uses a hardcoded, publicly known default AES key in AesPasswordEncAndDecServiceImpl, allowing authenticated attackers to decrypt stored datasource passwords. Attackers can obtain ciphertext passwords from the datasource detail API, for example via...

CVE-2026-109813: Use of Hard-coded Cryptographic Key

A hard-coded cryptographic key vulnerability exists in the /usr/bin/sysman of some of Moxa's industrial computing products. An unauthenticated attacker with adjacent network access could exploit the exposed private key material to compromise the confidentiality and integrity of communications...

PT-2026-115398

Name of the Vulnerable Software and Affected Versions Moxa industrial computing products affected versions not specified Description Two separate issues affect the system. First, a hard-coded cryptographic key exists in the /usr/bin/sysman binary, which an unauthenticated attacker with adjacent...