6097 matches found
EUVD-2026-123839
A use of hard-coded credentials vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2 all versions may allow an adjacent-network authenticated attacker with user permission to join the FGFM...
CVE-2026-126181
Fortinet FortiManager is impacted by a use of hard-coded credentials vulnerability (CWE-798) affecting versions 8.0.0 through 8.0.1 , 7.6.0 through 7.6.7 , 7.4.0 through 7.4.11 , and all versions of 7.2 . This flaw allows an authenticated attacker with user-level permissions on an adjacent networ...
CVE-2025-65855
CVE-2025-65855 HelpFlash IoT OTA Update Multiple Vulnerabilities Summary Multiple vulnerabilities in the OTA firmware update mechanism of Netun Solutions HelpFlash IoT allow an attacker with brief physical access to execute arbitrary code. CVE ID: CVE-2025-65855 Severity: HIGH CVSS v3.1 Score: 7....
ccs
Code Credential Scanner This script is intended to scan a large, diverse codebase for hard-coded credentials, or credentials present in configuration files. These represent a serious security issue, and can be extremely hard to detect and manage. The specific focus of this script is to create a...
EVlink City < R8 V3.4.0.1 - Authentication Bypass
A CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1, EVlink Parking EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1, and EVlink Smart Wallbox EVB1A all versions prior to R8 V3.4.0.1 that could allow an attacker t...
epson-eh-tw5350-advisories
Epson EH-TW5350 — CVE-2021-43716, CVE-2021-43717, CVE-2021-43718 Three vulnerabilities discovered in the Epson EH-TW5350 projector firmware 150075647YWWV110 by team B-BEAM-BOB during the KITRI Best of the Best BoB program, 2021. CVE IDs were assigned by MITRE on 2021-12-21 but the records remaine...
CVE-2026-125079
A vulnerability was determined in D-Link DCS-6501LH 3.03.02. This impacts the function pfgetonvifuserpwd/mydlinkdefaultsysinfo of the file /mnt/conf/SystemConfig.ini of the component Media Service. This manipulation of the argument pincode causes hard-coded credentials. It is possible to initiate...
CVE-2026-125086
A vulnerability has been found in D-Link M60 1.12.B01. Impacted is the function system of the file /etc/emDaemon/mosquitto.conf of the component emDaemon MQTT Broker. Such manipulation leads to hard-coded credentials. The attack can be executed remotely. The exploit has been disclosed to the publ...
CVE-2026-125086
A vulnerability exists in D-Link M60 version 1.12.B01 affecting the emDaemon MQTT Broker component. The flaw is located in the system function of the /etc/emDaemon/mosquitto.conf file, which allows for the use of hard-coded credentials . This issue can be exploited remotely, and the exploit has b...
EUVD-2026-120701
A vulnerability has been found in D-Link M60 1.12.B01. Impacted is the function system of the file /etc/emDaemon/mosquitto.conf of the component emDaemon MQTT Broker. Such manipulation leads to hard-coded credentials. The attack can be executed remotely. The exploit has been disclosed to the publ...
CVE-2026-125086 D-Link M60 emDaemon MQTT Broker mosquitto.conf system hard-coded credentials
A vulnerability has been found in D-Link M60 1.12.B01. Impacted is the function system of the file /etc/emDaemon/mosquitto.conf of the component emDaemon MQTT Broker. Such manipulation leads to hard-coded credentials. The attack can be executed remotely. The exploit has been disclosed to the publ...
EUVD-2026-120655
A vulnerability was determined in D-Link DCS-6501LH 3.03.02. This impacts the function pfgetonvifuserpwd/mydlinkdefaultsysinfo of the file /mnt/conf/SystemConfig.ini of the component Media Service. This manipulation of the argument pincode causes hard-coded credentials. It is possible to initiate...
CVE-2026-125079 D-Link DCS-6501LH Media Service SystemConfig.ini mydlink_default_sys_info hard-coded credentials
A vulnerability was determined in D-Link DCS-6501LH 3.03.02. This impacts the function pfgetonvifuserpwd/mydlinkdefaultsysinfo of the file /mnt/conf/SystemConfig.ini of the component Media Service. This manipulation of the argument pincode causes hard-coded credentials. It is possible to initiate...
CVE-2026-125079
A vulnerability exists in the Media Service component of the D-Link DCS-6501LH (version 3.03.02). The issue resides in the pf_get_onvif_user_pwd/mydlink_default_sys_info function within the file /mnt/conf/SystemConfig.ini. Manipulation of the pin_code argument results in the use of hard-coded cre...
CVE-2026-125086: D-Link M60: A vulnerability has been found in D-Link M60 1.12.B01
A vulnerability has been found in D-Link M60 1.12.B01. Impacted is the function system of the file /etc/emDaemon/mosquitto.conf of the component emDaemon MQTT Broker. Such manipulation leads to hard-coded credentials. The attack can be executed remotely. The exploit has been disclosed to the publ...
CVE-2026-125079: D-Link DCS-6501LH: A vulnerability was determined in D-Link DCS-6501LH 3.03.02
A vulnerability was determined in D-Link DCS-6501LH 3.03.02. This impacts the function pfgetonvifuserpwd/mydlinkdefaultsysinfo of the file /mnt/conf/SystemConfig.ini of the component Media Service. This manipulation of the argument pincode causes hard-coded credentials. It is possible to initiate...
PT-2026-141273
A vulnerability was determined in D-Link DCS-6501LH 3.03.02. This impacts the function pf get onvif user pwd/mydlink default sys info of the file /mnt/conf/SystemConfig.ini of the component Media Service. This manipulation of the argument pin code causes hard-coded credentials. It is possible to...
Use of hard-coded credentials
A Use of Hard-coded Credentials vulnerability CWE-798 in FortiManager cloud orchestration may allow an adjacent-network authenticated attacker with user permission to join the FGFM configuration-sync mesh of the affected FortiGate deployment via the default pre-shared key...
CVE-2026-121685
FrodoBots EarthRover Mini+ firmware version 6.2.46.2.50.614.0 contains multiple sets of hard-coded credentials. These include fleet‑wide credentials, including BasicAuth credentials for an Agora token service, AWS IAM access keys, AWS IoT MQTT credentials, and a Slack incoming webhook URL. These...