Gladinet CentreStack < 16.4.10315.56368 Use of Hard-coded Key Leads to Unauthenticated RCE

Gladinet CentreStack through 16.1.10296.56315 fixed in 16.4.10315.56368 has a deserialization vulnerability due to the CentreStack portal's hardcoded machineKey use, as exploited in the wild in March 2025. This enables threat actors who know the machineKey to serialize a payload for server-side...

CVE-2026-15469

🔑 CVE-2026-15469 ハードコードされたメッシュグループ秘密鍵 — TP-Link Deco XE75 / XE5300 / WE10800 共有のRSA-512メッシュグループ秘密鍵がファームウェアに組み込まれており、LAN隣接の攻撃者が信頼されたメッシュノードになりすまし、設定を上書きし、未署名ファームウェアを書き込み、メッシュ全体にピボットできる可能性があります。 English · 한국어 📋 概要 フィールド| 値 ---|--- CVE ID| CVE-2026-15469 脆弱性種別| CWE-321 — ハードコードされた暗号鍵の使用 攻撃パターン|...

CVE-2024-53522

CVE-2024-53522 CVE-2024-53522 익스플로잇 PoC 이 저장소는 Safecloud Co., Ltd. 가 발견한 취약점인 CVE-2024-53522 에 대한 개념 증명PoC을 포함하고 있습니다. 취약점에 대한 자세한 정보는 블로그 게시물을 참조하십시오: CVE-2024-53522: HOSxP 소프트웨어 0day 발견 및 익스플로잇 취약점 개요 CVE-2024-53522 은 HOSxP XE https://hosxp.net/에 영향을 미치는 심각한 보안 문제입니다. 이 취약점은 애플리케이션에서 정적 하드코딩된 개...

CVE-2025-56802

CVE-2025-56802 ReolinkデスクトップアプリケーションにおけるAES-CFB鍵生成および管理の脆弱性 1. 概要 名称 : Reolinkデスクトップアプリケーション バージョン : 8.18.12 ベンダー : Reolink CWE : CWE-321: ハードコードされた暗号鍵の使用, CWE-522: 保護が不十分な認証情報 CVSS : 5.1 MEDIUM ベクター文字列 : CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L 2. 概要...

CVE-2026-79735

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information...

EUVD-2026-75050

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information...

CVE-2026-79735

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information...

CVE-2026-79735

Dell Secure Connect Gateway (SCG) 5.0 is affected by a Use of Hard-coded Cryptographic Key vulnerability in both the Appliance (versions prior to 5.36.00.16) and Application (versions prior to 5.36.00.00) editions. An unauthenticated attacker with remote access could exploit this flaw, potentiall...

EUVD-2026-75015

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

CVE-2026-78486

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

CVE-2026-78481

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism...

EUVD-2026-74887

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism...

CVE-2026-81821 AVEVA Pipeline Integrity Monitor Use of hard-coded cryptographic key

The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards project files to decrypt and view sensitive information...

EUVD-2026-72492

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information disclosure...

CVE-2026-80167

CVE-2026-80167 affects Dell Secure Connect Gateway (SCG) 5.0 Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 . The vulnerability is a Use of Hard-coded Cryptographic Key , allowing a low-privileged attacker with local access to achieve information disclosure (C...

CVE-2026-80057

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information disclosure...

CVE-2026-78487

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information disclosure...

EUVD-2026-72454

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information disclosure...

CVE-2026-78487

Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application contain a Use of Hard-coded Cryptographic Key vulnerability. Affected versions are SCG 5.0 Appliance prior to 5.36.00.16 and SCG 5.0 Application prior to 5.36.00.00 . A low-privileged attacker with local access could exploit this to ...

CVE-2026-78487

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information disclosure...