CVE-2026-96587

The Viidure Dashcam Android application contains a critical vulnerability where permanent, plaintext cloud storage credentials are embedded within its compiled code. This flaw allows unauthorized entities to gain full access to critical platform storage, enabling them to read, modify, or delete o...

CVE-2026-96587 Use of Hard-coded Credentials in Viidure Dashcam Android Application

The Viidure Android application embeds permanent, plaintext cloud storage credentials within its compiled code. These credentials provide full access to critical platform storage, including the ability to read, modify, or delete operational files such as firmware and application binaries...

CVE-2026-100294

The Anjvision YSSD‑RTMP‑H5 firmware, specifically version 3.3.2.4 , contains hardcoded cloud‑API credentials that are shared across all deployed devices. An attacker who obtains the public firmware package can extract these credentials to interact with the cloud service in unauthorized ways. No s...

CVE-2026-100294 Use of Hard-coded Credentials in Anjvision YSSD-RTMP-H5

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the firmware embeds hardcoded cloud‑API credentials that are shared across deployed devices. Anyone obtaining the public firmware package can reuse these values to interact with the cloud service in ways not intended for normal operation...

CVE-2026-100294 Use of Hard-coded Credentials in Anjvision YSSD-RTMP-H5

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the firmware embeds hardcoded cloud‑API credentials that are shared across deployed devices. Anyone obtaining the public firmware package can reuse these values to interact with the cloud service in ways not intended for normal operation...

CVE-2026-102241

A vulnerability was determined in Netcore NAP930 0.1.241010.141410. This vulnerability affects unknown code of the file /lib/functions/backupcommon.sh of the component Backup/Restore. This manipulation of the argument aespass causes use of hard-coded cryptographic key . It is possible to initiate...

CVE-2026-102241 Netcore NAP930 Backup/Restore backup_common.sh hard-coded key

A vulnerability was determined in Netcore NAP930 0.1.241010.141410. This vulnerability affects unknown code of the file /lib/functions/backupcommon.sh of the component Backup/Restore. This manipulation of the argument aespass causes use of hard-coded cryptographic key . It is possible to initiate...

EUVD-2026-88607

A vulnerability was determined in Netcore NAP930 0.1.241010.141410. This vulnerability affects unknown code of the file /lib/functions/backupcommon.sh of the component Backup/Restore. This manipulation of the argument aespass causes use of hard-coded cryptographic key . It is possible to initiate...

CVE-2026-102241

The Netcore NAP930 (version 0.1.241010.141410) contains a vulnerability in the Backup/Restore component, specifically within the /lib/functions/backup_common.sh file. Manipulation of the aes_pass argument leads to the use of a hard-coded cryptographic key . This vulnerability can be initiated rem...

CVE-2026-102241 Netcore NAP930 Backup/Restore backup_common.sh hard-coded key

A vulnerability was determined in Netcore NAP930 0.1.241010.141410. This vulnerability affects unknown code of the file /lib/functions/backupcommon.sh of the component Backup/Restore. This manipulation of the argument aespass causes use of hard-coded cryptographic key . It is possible to initiate...

CVE-2026-102241: Use of Hard-coded Cryptographic Key

A vulnerability was determined in Netcore NAP930 0.1.241010.141410. This vulnerability affects unknown code of the file /lib/functions/backupcommon.sh of the component Backup/Restore. This manipulation of the argument aespass causes use of hard-coded cryptographic key . It is possible to initiate...

PT-2026-102436

Name of the Vulnerable Software and Affected Versions Netcore NAP930 version 0.1.241010.141410 Description An issue exists in the Backup/Restore component within the /lib/functions/backup common.sh file. The manipulation of the aes pass argument leads to the use of a hard-coded cryptographic key,...

CVE-2026-13768

CVE-2026-13768: 特権的IoTハブ資格情報 — フリート列挙、デバイスRCE、およびホームネットワーク侵入 勧告 フィールド| 値 ---|--- CVE| CVE-2026-13768 ICSA| ICSA-26-183-03 Gardyn IoT Hub CVSS 3.1| 10.0 重大 ベクター 3.1| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L ベクター 4.0| CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L CWE| CWE-798...

CVE-2026-70413

Dell Live Optics Collector, versions prior to 27.2.13.310, contains a Use of Hard-coded Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...

CVE-2026-70413

Dell Live Optics Collector versions prior to 27.2.13.310 are vulnerable to a Use of Hard-coded Password vulnerability. A low privileged attacker with local access could potentially exploit this flaw, resulting in Information exposure . Remediation is available via security update DSA-2026-339 . N...

CVE-2026-70413

Dell Live Optics Collector, versions prior to 27.2.13.310, contains a Use of Hard-coded Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...

CVE-2026-70413

Dell Live Optics Collector, versions prior to 27.2.13.310, contains a Use of Hard-coded Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...

CVE-2026-82929

mH-DEVELOPER smart home module uses the same hard-coded SSH host keys on every device, with no per-device key generation. An attacker who extracts these keys from the firmware can set up a rogue SSH server that clients will trust without warning, enabling man-in-the-middle attacks and credential...

CVE-2025-70962

CVE-2025-70962 ZOSI C519M IPカメラのRTSPサービスにおけるハードコードされた認証情報の使用 フィールド| 値 ---|--- CVE ID| CVE-2025-70962 ベンダー| ZOSI Technology 製品| ZOSI C519M スマートIPカメラ（型番 1NC-519M としても記載） 影響を受けるバージョン| ファームウェア V4.2.8.832C01450BA（テスト済みビルド。それ以前のバージョンは未検証） 脆弱性の種類| CWE-798: ハードコードされた認証情報の使用（CWE-1392 も参照） CVSS v3.1| 7.5（高...

CVE-2026-101052

A security vulnerability has been detected in refly-ai refly up to 1.1.0. This issue affects some unknown processing of the file apps/api/src/modules/config/app.config.ts of the component JWT Token Handler. The manipulation with the input test leads to hard-coded credentials. It is possible to...