EUVD-2026-92777

A vulnerability has been found in Lybbn Django-Vue-Lyadmin up to 3.2.12. The impacted element is an unknown function of the file backend/application/settings.py of the component JWT Signing. The manipulation of the argument SECRETKEY leads to use of hard-coded cryptographic key . Remote...

CVE-2026-105392

A vulnerability exists in Lybbn Django-Vue-Lyadmin up to version 3.2.12 due to a hard-coded cryptographic key within the JWT Signing component. Specifically, the manipulation of the SECRET_KEY argument in backend/application/settings.py leads to the use of this hard-coded key. Remote exploitation...

CVE-2026-94591 Armatura LLC Armatura One Use of Hard-coded Cryptographic Key

Armatura One stores database and message-broker credentials in an install configuration file, encrypting them with AES-128-CBC when this protection is enabled. The encryption key and initialization vector are fixed values embedded in the software itself and are identical across every installation...

Gladinet CentreStack < 16.4.10315.56368 Use of Hard-coded Key Leads to Unauthenticated RCE

Gladinet CentreStack through 16.1.10296.56315 fixed in 16.4.10315.56368 has a deserialization vulnerability due to the CentreStack portal's hardcoded machineKey use, as exploited in the wild in March 2025. This enables threat actors who know the machineKey to serialize a payload for server-side...

CVE-2026-15469

🔑 CVE-2026-15469 하드코딩 메시 그룹 개인키 — TP-Link Deco XE75 / XE5300 / WE10800 펌웨어에 박혀 있는 RSA-512 메시 그룹 개인키로 인해, LAN 인접 공격자가 신뢰된 메시 노드로 위장하여 설정을 덮어쓰고, 무서명 펌웨어를 플래시하며, 메시 전체로 측면 이동할 수 있습니다. English · 한국어 📋 한눈에 보기 항목| 내용 ---|--- CVE ID| CVE-2026-15469 취약점 유형| CWE-321 — 하드코딩된 암호키 사용 공격 패턴| CAPEC-115 — 인증 우회...

CVE-2025-56802

CVE-2025-56802 Reolink 데스크톱 애플리케이션의 AES-CFB 키 생성 및 관리 취약점 1. 개요 이름 : Reolink 데스크톱 애플리케이션 버전 : 8.18.12 공급업체 : Reolink CWE : CWE-321: 하드코딩된 암호화 키 사용, CWE-522: 보호가 불충분한 자격 증명 CVSS : 5.1 MEDIUM 벡터 문자열 : CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L 2. 요약 Reolink 데스크톱 애플리케이션버전 8.18.12은 AES-CFB 알고리즘을...

CVE-2024-53522

CVE-2024-53522 CVE-2024-53522 익스플로잇 PoC 이 저장소는 Safecloud Co., Ltd. 가 발견한 취약점인 CVE-2024-53522 에 대한 개념 증명PoC을 포함하고 있습니다. 취약점에 대한 자세한 정보는 블로그 게시물을 참조하십시오: CVE-2024-53522: HOSxP 소프트웨어 0day 발견 및 익스플로잇 취약점 개요 CVE-2024-53522 은 HOSxP XE https://hosxp.net/에 영향을 미치는 심각한 보안 문제입니다. 이 취약점은 애플리케이션에서 정적 하드코딩된 개...

CVE-2026-102241 Netcore NAP930 Backup/Restore backup_common.sh hard-coded key

A vulnerability was determined in Netcore NAP930 0.1.241010.141410. This vulnerability affects unknown code of the file /lib/functions/backupcommon.sh of the component Backup/Restore. This manipulation of the argument aespass causes use of hard-coded cryptographic key . It is possible to initiate...

CVE-2026-102241

The Netcore NAP930 (version 0.1.241010.141410) contains a vulnerability in the Backup/Restore component, specifically within the /lib/functions/backup_common.sh file. Manipulation of the aes_pass argument leads to the use of a hard-coded cryptographic key . This vulnerability can be initiated rem...

CVE-2026-102241 Netcore NAP930 Backup/Restore backup_common.sh hard-coded key

A vulnerability was determined in Netcore NAP930 0.1.241010.141410. This vulnerability affects unknown code of the file /lib/functions/backupcommon.sh of the component Backup/Restore. This manipulation of the argument aespass causes use of hard-coded cryptographic key . It is possible to initiate...

EUVD-2026-86459

The Botslab G980H dash camera firmware uses a hard-coded cryptographic key and initialization vector to protect WiFi credentials communicated by the device. An attacker who obtains the protected credential and extracts the cryptographic material from the firmware could recover the WiFi password a...

CVE-2026-75558

The Botslab G980H dash camera firmware contains a vulnerability due to the use of a hard-coded cryptographic key and initialization vector. This flaw is used to protect WiFi credentials communicated by the device. An attacker capable of extracting cryptographic material from the firmware and obta...

SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE

SolarWinds has released security updates to address a high-severity flaw in Access Rights Manager ARM that, if successfully exploited, could lead to an unauthenticated remote code execution vulnerability. The vulnerability, tracked as CVE-2026-28326 , is rated 8.8 out of 10.0 on the CVSS scoring...

CVE-2026-81478

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...

CVE-2026-81478

Dell OpenManage Server Administrator versions prior to 11.1.0.3 contain a Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with remote access could potentially exploit this to achieve unauthorized access , with high impact on confidentiality, integrity, and availabil...

Smartphone application Tohoku Electric Power "Yorisou e Net" vulnerable to use of hard-coded cryptographic key

Overview Smartphone application Tohoku Electric Power "Yorisou e Net" provided by Tohoku Electric Power Company, Incorporated contains the following vulnerability: Use of hard-coded cryptographic key CWE-321 - CVE-2026-75553 Yuta Sasaki of Ai Solutions Co., Ltd. reported this vulnerability to IPA...

CVE-2026-50606 Hard-coded Encryption Key Vulnerability in Acer System Monitoring for NitroSense and PredatorSense Software

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES encryption key within the software. Under certain circumstances, a local attacker may be able to use the embedded key ...

CVE-2026-50606: Use of Hard-coded Cryptographic Key

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES encryption key within the software. Under certain circumstances, a local attacker may be able to use the embedded key ...

CVE-2026-50603: Use of Hard-coded Cryptographic Key

A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES encryption key within the software. Under certain circumstances, a local attacker may be able to use the embedded key to...

CVE-2026-81326

QND uses a hard-coded cryptographic key, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to obtain administrator credentials, including an ID and password...