CVE-2026-100294 Use of Hard-coded Credentials in Anjvision YSSD-RTMP-H5

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the firmware embeds hardcoded cloud‑API credentials that are shared across deployed devices. Anyone obtaining the public firmware package can reuse these values to interact with the cloud service in ways not intended for normal operation...

CVE-2026-100294 Use of Hard-coded Credentials in Anjvision YSSD-RTMP-H5

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the firmware embeds hardcoded cloud‑API credentials that are shared across deployed devices. Anyone obtaining the public firmware package can reuse these values to interact with the cloud service in ways not intended for normal operation...

CVE-2026-102241

A vulnerability was determined in Netcore NAP930 0.1.241010.141410. This vulnerability affects unknown code of the file /lib/functions/backupcommon.sh of the component Backup/Restore. This manipulation of the argument aespass causes use of hard-coded cryptographic key . It is possible to initiate...

EUVD-2026-88607

A vulnerability was determined in Netcore NAP930 0.1.241010.141410. This vulnerability affects unknown code of the file /lib/functions/backupcommon.sh of the component Backup/Restore. This manipulation of the argument aespass causes use of hard-coded cryptographic key . It is possible to initiate...

CVE-2026-102241 Netcore NAP930 Backup/Restore backup_common.sh hard-coded key

A vulnerability was determined in Netcore NAP930 0.1.241010.141410. This vulnerability affects unknown code of the file /lib/functions/backupcommon.sh of the component Backup/Restore. This manipulation of the argument aespass causes use of hard-coded cryptographic key . It is possible to initiate...

CVE-2026-102241 Netcore NAP930 Backup/Restore backup_common.sh hard-coded key

A vulnerability was determined in Netcore NAP930 0.1.241010.141410. This vulnerability affects unknown code of the file /lib/functions/backupcommon.sh of the component Backup/Restore. This manipulation of the argument aespass causes use of hard-coded cryptographic key . It is possible to initiate...

CVE-2026-102241

The Netcore NAP930 (version 0.1.241010.141410) contains a vulnerability in the Backup/Restore component, specifically within the /lib/functions/backup_common.sh file. Manipulation of the aes_pass argument leads to the use of a hard-coded cryptographic key . This vulnerability can be initiated rem...

PT-2026-102436

Name of the Vulnerable Software and Affected Versions Netcore NAP930 version 0.1.241010.141410 Description An issue exists in the Backup/Restore component within the /lib/functions/backup common.sh file. The manipulation of the aes pass argument leads to the use of a hard-coded cryptographic key,...

CVE-2026-102241: Use of Hard-coded Cryptographic Key

A vulnerability was determined in Netcore NAP930 0.1.241010.141410. This vulnerability affects unknown code of the file /lib/functions/backupcommon.sh of the component Backup/Restore. This manipulation of the argument aespass causes use of hard-coded cryptographic key . It is possible to initiate...

CVE-2026-13768

CVE-2026-13768：特权IoT Hub凭据——设备枚举、设备远程代码执行及家庭网络横向移动 安全公告 字段| 值 ---|--- CVE| CVE-2026-13768 ICSA| ICSA-26-183-03 Gardyn IoT Hub CVSS 3.1| 10.0 严重 向量 3.1| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L 向量 4.0| CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L CWE| CWE-798 硬编码凭据的使用 研究人员|...

CVE-2026-70413

Dell Live Optics Collector, versions prior to 27.2.13.310, contains a Use of Hard-coded Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...

CVE-2026-70413

Dell Live Optics Collector versions prior to 27.2.13.310 are vulnerable to a Use of Hard-coded Password vulnerability. A low privileged attacker with local access could potentially exploit this flaw, resulting in Information exposure . Remediation is available via security update DSA-2026-339 . N...

CVE-2026-70413

Dell Live Optics Collector, versions prior to 27.2.13.310, contains a Use of Hard-coded Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...

CVE-2026-70413

Dell Live Optics Collector, versions prior to 27.2.13.310, contains a Use of Hard-coded Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...

CVE-2026-82929

mH-DEVELOPER smart home module uses the same hard-coded SSH host keys on every device, with no per-device key generation. An attacker who extracts these keys from the firmware can set up a rogue SSH server that clients will trust without warning, enabling man-in-the-middle attacks and credential...

CVE-2025-70962

CVE-2025-70962 ZOSI C519M 网络摄像机 RTSP 服务使用硬编码凭据 字段| 值 ---|--- CVE ID| CVE-2025-70962 厂商| ZOSI Technology 产品| ZOSI C519M 智能网络摄像机（亦列为型号 1NC-519M） 受影响版本| 固件 V4.2.8.832C01450BA（已测试版本；更早版本未验证） 漏洞类型| CWE-798：使用硬编码凭据（另见 CWE-1392） CVSS v3.1| 7.5（高危）— CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS v4.0|...

CVE-2026-101052

A security vulnerability has been detected in refly-ai refly up to 1.1.0. This issue affects some unknown processing of the file apps/api/src/modules/config/app.config.ts of the component JWT Token Handler. The manipulation with the input test leads to hard-coded credentials. It is possible to...

EUVD-2026-88229

mH-DEVELOPER smart home module uses the same hard-coded SSH host keys on every device, with no per-device key generation. An attacker who extracts these keys from the firmware can set up a rogue SSH server that clients will trust without warning, enabling man-in-the-middle attacks and credential...

CVE-2026-82929 Use of Shared Cryptographic Key in mH-DEVELOPER

mH-DEVELOPER smart home module uses the same hard-coded SSH host keys on every device, with no per-device key generation. An attacker who extracts these keys from the firmware can set up a rogue SSH server that clients will trust without warning, enabling man-in-the-middle attacks and credential...

CVE-2026-82929

The mH-DEVELOPER smart home module is vulnerable because it uses identical hard-coded SSH host keys across all devices instead of generating unique per-device keys. An attacker capable of extracting these keys from the firmware can deploy a rogue SSH server that clients will trust automatically. ...