CVE-2026-27874: Use of Hard-coded Credentials

: Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FS32 allows : Exploitation of Default or Hard-coded Credentials. This issue affects EasyIO FS32: before 3.0b63...

CVE-2026-27873: Use of Hard-coded Credentials

Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FG allows - Pasword Spraying. This issue affects EasyIO FG: before 2.0b52...

PT-2026-104030

Name of the Vulnerable Software and Affected Versions EasyIO FG versions prior to 2.0b52 Description Johnson Controls EasyIO FG contains hard-coded credentials, which can be leveraged to perform password spraying. Password spraying is a type of brute-force attack where a common password is tried...

PT-2026-103981

Name of the Vulnerable Software and Affected Versions Joyland AI affected versions not specified Description The application contains hard-coded credentials for the GeTui push notification service. This allows an attacker to access the GeTui REST API and send push notifications with arbitrary...

CVE-2026-82829: Hidden Functionality

Hitachi Coding Software Suite contains a vulnerability related to Hidden Functionality vulnerability which allows an attacker to gain unauthorized access by exploiting hidden accounts or hard coded credentials. This issue affects Hitachi Coding Software Suite: through 3.3.0...

Rocky Linux 8 [CIQ] Security Update: smartmontools / smartmontools-debuginfo / smartmontools-debugsource (crlsa-2020_2231)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20202231 advisory. ceph-ansible: hard coded credential in ceph-ansible playbook CVE-2020-1716 Tenable has extracted the preceding description block directly from the CIQ security...

CVE-2026-55395: Use of Hard-coded Credentials

Hardcoded passwords in the access control in Teledyne FLIR Aware2 versions through 6.9.0.2 PackBot and 1.7.9 FirstLook allows remote unauthenticated attackers to access and reconfigure Teledyne FLIR PackBot and FirstLook robots running this software via reading the passwords from the firmware or...

CVE-2026-96587 Use of Hard-coded Credentials in Viidure Dashcam Android Application

The Viidure Android application embeds permanent, plaintext cloud storage credentials within its compiled code. These credentials provide full access to critical platform storage, including the ability to read, modify, or delete operational files such as firmware and application binaries...

CVE-2026-96587

The Viidure Dashcam Android application contains a critical vulnerability where permanent, plaintext cloud storage credentials are embedded within its compiled code. This flaw allows unauthorized entities to gain full access to critical platform storage, enabling them to read, modify, or delete o...

CVE-2026-96587 Use of Hard-coded Credentials in Viidure Dashcam Android Application

The Viidure Android application embeds permanent, plaintext cloud storage credentials within its compiled code. These credentials provide full access to critical platform storage, including the ability to read, modify, or delete operational files such as firmware and application binaries...

CVE-2026-100294

The Anjvision YSSD‑RTMP‑H5 firmware, specifically version 3.3.2.4 , contains hardcoded cloud‑API credentials that are shared across all deployed devices. An attacker who obtains the public firmware package can extract these credentials to interact with the cloud service in unauthorized ways. No s...

CVE-2026-100294 Use of Hard-coded Credentials in Anjvision YSSD-RTMP-H5

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the firmware embeds hardcoded cloud‑API credentials that are shared across deployed devices. Anyone obtaining the public firmware package can reuse these values to interact with the cloud service in ways not intended for normal operation...

CVE-2026-100294 Use of Hard-coded Credentials in Anjvision YSSD-RTMP-H5

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the firmware embeds hardcoded cloud‑API credentials that are shared across deployed devices. Anyone obtaining the public firmware package can reuse these values to interact with the cloud service in ways not intended for normal operation...

CVE-2026-7193: Use of Hard-coded Credentials

A vulnerability relating to the use of predefined credentials in the Dbit T-CPE301K 4G WiFi mini-router allows an attacker connected to the same network to gain full root access to the device via the Telnet service port 23 using static credentials...

CVE-2026-96587: Use of Hard-coded Credentials

The Viidure Android application embeds permanent, plaintext cloud storage credentials within its compiled code. These credentials provide full access to critical platform storage, including the ability to read, modify, or delete operational files such as firmware and application binaries...

Epson iProjection Android Application version 3.2.6 Hard-coded Credentials

Epson iProjection Android application version 3.2.6 contains hard-coded credentials that can authenticate to the Web Control interface of affected Epson projectors...

CVE-2026-100294: Use of Hard-coded Credentials

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the firmware embeds hardcoded cloud‑API credentials that are shared across deployed devices. Anyone obtaining the public firmware package can reuse these values to interact with the cloud service in ways not intended for normal operation...

CVE-2026-101052

A security vulnerability has been detected in refly-ai refly up to 1.1.0. This issue affects some unknown processing of the file apps/api/src/modules/config/app.config.ts of the component JWT Token Handler. The manipulation with the input test leads to hard-coded credentials. It is possible to...

CVE-2026-101052

The refly-ai refly software, version up to 1.1.0 , contains a security vulnerability in the JWT Token Handler component. The issue originates from the file apps/api/src/modules/config/app.config.ts, where unknown processing leads to the exposure of hard-coded credentials . This vulnerability can ...

CVE-2026-101052 refly-ai refly JWT Token app.config.ts hard-coded credentials

A security vulnerability has been detected in refly-ai refly up to 1.1.0. This issue affects some unknown processing of the file apps/api/src/modules/config/app.config.ts of the component JWT Token Handler. The manipulation with the input test leads to hard-coded credentials. It is possible to...