PT-2026-116092

🚨 CVE-2026-111693 DataBuff ai-apm-web through 0.1.10 contains a hard-coded default credentials vulnerability that allows unauthenticated attackers to gain administrator access using the built-in admin/Databuff@123 account. Attackers can POST these credentials to /webapi/api/v1/auth/login to obtai...

PT-2026-115614

Name of the Vulnerable Software and Affected Versions EseeCloud affected versions not specified Description An attacker can gain unauthorized access to EseeCloud devices by utilizing a hard-coded credential to log in. Recommendations At the moment, there is no information about a newer version th...

CVE-2026-111281

Jooan JA-A12 IP cameras with firmware 00920171107 and 05.02.31.105 contain a remote code execution vulnerability that allows unauthenticated attackers to run root commands via hard-coded credentials. Attackers send singleCMD=SetDiagMode to /goform/SingleHandlebyCommand with an attacker-chosen...

CVE-2026-111281

The Jooan JA-A12 IP cameras, running firmware versions 009_20171107 and 05.02.31.105 , are vulnerable to an unauthenticated remote code execution (RCE) flaw. The root cause is the use of hard-coded credentials (CWE-798). An unauthenticated attacker can send a singleCMD=SetDiagMode request to the ...

CVE-2026-111281 Jooan JA-A12 Unauthenticated Root RCE via SetDiagMode Hard-Coded Credentials

Jooan JA-A12 IP cameras with firmware 00920171107 and 05.02.31.105 contain a remote code execution vulnerability that allows unauthenticated attackers to run root commands via hard-coded credentials. Attackers send singleCMD=SetDiagMode to /goform/SingleHandlebyCommand with an attacker-chosen...

CVE-2026-111281 Jooan JA-A12 Unauthenticated Root RCE via SetDiagMode Hard-Coded Credentials

Jooan JA-A12 IP cameras with firmware 00920171107 and 05.02.31.105 contain a remote code execution vulnerability that allows unauthenticated attackers to run root commands via hard-coded credentials. Attackers send singleCMD=SetDiagMode to /goform/SingleHandlebyCommand with an attacker-chosen...

Guangzhou Juan IoT EseeCloud App Trust Management Vulnerability

The Guangzhou Juan IoT EseeCloud App versions 4.9.6 and earlier, as well as the EseeCloud Firmware version 4.9.86.0 and earlier, have a trust management vulnerability. This vulnerability stems from the use of hard-coded credentials, which may allow attackers to log into EseeCloud devices...

Fortinet FortiSandbox login_user_profile Hard-Coded Credentials Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Fortinet FortiSandbox. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authentication mechanism. The issue results from the use of hard-coded...

UBUNTU-CVE-2026-108831

A security vulnerability has been detected in meetecho janus-gateway up to 1.4.2. This vulnerability affects unknown code of the file html/demos/admin.js of the component Admin API. Such manipulation leads to hard-coded credentials. The attack can be executed remotely. The exploit has been...

CVE-2026-111281: Use of Hard-coded Credentials

Jooan JA-A12 IP cameras with firmware 00920171107 and 05.02.31.105 contain a remote code execution vulnerability that allows unauthenticated attackers to run root commands via hard-coded credentials. Attackers send singleCMD=SetDiagMode to /goform/SingleHandlebyCommand with an attacker-chosen...

CVE-2026-105033: Use of Hard-coded Credentials

The EnergizeLab AI Station RK3562 firmware image ships with default root credentials and SSH enabled. An attacker with network access to the device can log in as root and take full control of it...

PT-2026-115272

Name of the Vulnerable Software and Affected Versions Jooan JA-A12 IP cameras version 009 20171107 Jooan JA-A12 IP cameras version 05.02.31.105 Description Unauthenticated attackers can achieve remote code execution and gain full device control by utilizing hard-coded credentials. The issue occur...

Security Bulletin: Security vulnerability has been found in IBM Verify Identity Access and IBM Security Verify Access (CVE-2026-109126)

Summary Security vulnerability has been addressed in IBM Verify Identity Access and IBM Security Verify Access. Vulnerability Details ID: CVE-2026-109126 DESCRIPTION: IBM Security Verify Access Appliance could allow a physically proximate attacker to gain elevated privileges due to the use of...

CVE-2026-110667

A security flaw has been discovered in cemtan sar2html 4.0.0. Affected by this vulnerability is an unknown functionality of the file sar2html.py. The manipulation of the argument SECRETKEY results in hard-coded credentials. The attack can be executed remotely. The project was informed of the...

CVE-2026-110667 cemtan sar2html sar2html.py hard-coded credentials

A security flaw has been discovered in cemtan sar2html 4.0.0. Affected by this vulnerability is an unknown functionality of the file sar2html.py. The manipulation of the argument SECRETKEY results in hard-coded credentials. The attack can be executed remotely. The project was informed of the...

CVE-2026-110667

A security flaw exists in cemtan sar2html version 4.0.0 within the sar2html.py file. Manipulating the SECRET_KEY argument leads to the use of hard-coded credentials . This vulnerability can be exploited remotely . While the project was notified via an issue report, no official response or remedia...

EUVD-2026-101580

A security flaw has been discovered in cemtan sar2html 4.0.0. Affected by this vulnerability is an unknown functionality of the file sar2html.py. The manipulation of the argument SECRETKEY results in hard-coded credentials. The attack can be executed remotely. The project was informed of the...

CVE-2026-110667 cemtan sar2html sar2html.py hard-coded credentials

A security flaw has been discovered in cemtan sar2html 4.0.0. Affected by this vulnerability is an unknown functionality of the file sar2html.py. The manipulation of the argument SECRETKEY results in hard-coded credentials. The attack can be executed remotely. The project was informed of the...

CVE-2026-110667 cemtan sar2html sar2html.py hard-coded credentials

A security flaw has been discovered in cemtan sar2html 4.0.0. Affected by this vulnerability is an unknown functionality of the file sar2html.py. The manipulation of the argument SECRETKEY results in hard-coded credentials. The attack can be executed remotely. The project was informed of the...

PT-2026-114103

A security flaw has been discovered in cemtan sar2html 4.0.0. Affected by this vulnerability is an unknown functionality of the file sar2html.py. The manipulation of the argument SECRET KEY results in hard-coded credentials. The attack can be executed remotely. The project was informed of the...