EUVD-2026-101580

A security flaw has been discovered in cemtan sar2html 4.0.0. Affected by this vulnerability is an unknown functionality of the file sar2html.py. The manipulation of the argument SECRETKEY results in hard-coded credentials. The attack can be executed remotely. The project was informed of the...

CVE-2026-110667 cemtan sar2html sar2html.py hard-coded credentials

A security flaw has been discovered in cemtan sar2html 4.0.0. Affected by this vulnerability is an unknown functionality of the file sar2html.py. The manipulation of the argument SECRETKEY results in hard-coded credentials. The attack can be executed remotely. The project was informed of the...

CVE-2026-110667

A security flaw exists in cemtan sar2html version 4.0.0 within the sar2html.py file. Manipulating the SECRET_KEY argument leads to the use of hard-coded credentials . This vulnerability can be exploited remotely . While the project was notified via an issue report, no official response or remedia...

CVE-2026-77427: Use of Hard-coded Credentials

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. From 3.9.0 until 3.22.0, pristine manual FileRise installations without PERSISTENTTOKENSKEY or metadata/persistenttokens.key can activate a published legacy compatibility key. If an attacker...

CVE-2026-81964

Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally...

CVE-2026-81964

The Windows Update Orchestrator Service is affected by a security feature bypass vulnerability. This issue is caused by the use of hard-coded credentials , which allows an authorized attacker to perform the bypass locally . The vulnerability is associated with CWE-798 . While the impact on integr...

Windows Update Orchestrator Service Security Feature Bypass Vulnerability

Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally...

Microsoft Windows: CVE-2026-81964: Windows Update Orchestrator Service Security Feature Bypass Vulnerability

Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally...

CVE-2026-81964: Use of Hard-coded Credentials

Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally...

CVE-2026-109566

Rapyd Admin from 9.0.0 before 9.20.0 contains a hard-coded credentials vulnerability that allows remote unauthenticated attackers to gain super-admin access through an AuthSeeder-created admin@laravel account with password admin. The account is seeded by the setup installer and silently re-create...

EUVD-2026-97889

Rapyd Admin from 9.0.0 before 9.20.0 contains a hard-coded credentials vulnerability that allows remote unauthenticated attackers to gain super-admin access through an AuthSeeder-created admin@laravel account with password admin. The account is seeded by the setup installer and silently re-create...

CVE-2026-109566 Rapyd Admin 9.0.0 before 9.20.0 Hard-Coded Super-Admin Credentials via AuthSeeder

Rapyd Admin from 9.0.0 before 9.20.0 contains a hard-coded credentials vulnerability that allows remote unauthenticated attackers to gain super-admin access through an AuthSeeder-created admin@laravel account with password admin. The account is seeded by the setup installer and silently re-create...

CVE-2026-109566 Rapyd Admin 9.0.0 before 9.20.0 Hard-Coded Super-Admin Credentials via AuthSeeder

Rapyd Admin from 9.0.0 before 9.20.0 contains a hard-coded credentials vulnerability that allows remote unauthenticated attackers to gain super-admin access through an AuthSeeder-created admin@laravel account with password admin. The account is seeded by the setup installer and silently re-create...

CVE-2026-109566

Rapyd Admin versions 9.0.0 through 9.19.0 are vulnerable to a hard-coded credentials flaw. The AuthSeeder component seeds an admin@laravel account with the password admin during installation and silently re-creates it during every rpd:make run. This allows remote unauthenticated attackers to gain...

DEBIAN-CVE-2026-108831

A security vulnerability has been detected in meetecho janus-gateway up to 1.4.2. This vulnerability affects unknown code of the file html/demos/admin.js of the component Admin API. Such manipulation leads to hard-coded credentials. The attack can be executed remotely. The exploit has been...

CVE-2026-108831

A security vulnerability has been detected in meetecho janus-gateway up to 1.4.2. This vulnerability affects unknown code of the file html/demos/admin.js of the component Admin API. Such manipulation leads to hard-coded credentials. The attack can be executed remotely. The exploit has been...

CVE-2026-108831

A security vulnerability exists in meetecho janus-gateway versions up to 1.4.2 . The issue resides within the Admin API component, specifically in the html/demos/admin.js file. The root cause is the presence of hard-coded credentials , which allows for remote execution of the attack. Public explo...

CVE-2026-108831 meetecho janus-gateway Admin API admin.js hard-coded credentials

A security vulnerability has been detected in meetecho janus-gateway up to 1.4.2. This vulnerability affects unknown code of the file html/demos/admin.js of the component Admin API. Such manipulation leads to hard-coded credentials. The attack can be executed remotely. The exploit has been...

EUVD-2026-97356

A security vulnerability has been detected in meetecho janus-gateway up to 1.4.2. This vulnerability affects unknown code of the file html/demos/admin.js of the component Admin API. Such manipulation leads to hard-coded credentials. The attack can be executed remotely. The exploit has been...

CVE-2026-108831: Use of Hard-coded Credentials

A security vulnerability has been detected in meetecho janus-gateway up to 1.4.2. This vulnerability affects unknown code of the file html/demos/admin.js of the component Admin API. Such manipulation leads to hard-coded credentials. The attack can be executed remotely. The exploit has been...