CVE-2026-81478

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...

CVE-2026-81478

Dell OpenManage Server Administrator versions prior to 11.1.0.3 contain a Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with remote access could potentially exploit this to achieve unauthorized access , with high impact on confidentiality, integrity, and availabil...

CVE-2026-15469

🔑 CVE-2026-15469 ハードコードされたメッシュグループ秘密鍵 — TP-Link Deco XE75 / XE5300 / WE10800 共有のRSA-512メッシュグループ秘密鍵がファームウェアに組み込まれており、LAN隣接の攻撃者が信頼されたメッシュノードになりすまし、設定を上書きし、未署名ファームウェアを書き込み、メッシュ全体にピボットできる可能性があります。 English · 한국어 📋 概要 フィールド| 値 ---|--- CVE ID| CVE-2026-15469 脆弱性種別| CWE-321 — ハードコードされた暗号鍵の使用 攻撃パターン|...

CVE-2024-53522

CVE-2024-53522 CVE-2024-53522 익스플로잇 PoC 이 저장소는 Safecloud Co., Ltd. 가 발견한 취약점인 CVE-2024-53522 에 대한 개념 증명PoC을 포함하고 있습니다. 취약점에 대한 자세한 정보는 블로그 게시물을 참조하십시오: CVE-2024-53522: HOSxP 소프트웨어 0day 발견 및 익스플로잇 취약점 개요 CVE-2024-53522 은 HOSxP XE https://hosxp.net/에 영향을 미치는 심각한 보안 문제입니다. 이 취약점은 애플리케이션에서 정적 하드코딩된 개...

CVE-2025-56802

CVE-2025-56802 Reolink 데스크톱 애플리케이션의 AES-CFB 키 생성 및 관리 취약점 1. 개요 이름 : Reolink 데스크톱 애플리케이션 버전 : 8.18.12 공급업체 : Reolink CWE : CWE-321: 하드코딩된 암호화 키 사용, CWE-522: 보호가 불충분한 자격 증명 CVSS : 5.1 MEDIUM 벡터 문자열 : CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L 2. 요약 Reolink 데스크톱 애플리케이션버전 8.18.12은 AES-CFB 알고리즘을...

Gladinet CentreStack < 16.4.10315.56368 Use of Hard-coded Key Leads to Unauthenticated RCE

Gladinet CentreStack through 16.1.10296.56315 fixed in 16.4.10315.56368 has a deserialization vulnerability due to the CentreStack portal's hardcoded machineKey use, as exploited in the wild in March 2025. This enables threat actors who know the machineKey to serialize a payload for server-side...

CVE-2026-81326

QND uses a hard-coded cryptographic key, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to obtain administrator credentials, including an ID and password...

CVE-2026-81326

CVE-2026-81326 affects QND by QualitySoft, a product whose client is installed on Windows PCs. The root cause is a hard-coded cryptographic key , which may allow a local attacker with logged-in access to the client machine to obtain administrator credentials , including an ID and password. The vu...

CVE-2026-81326

QND uses a hard-coded cryptographic key, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to obtain administrator credentials, including an ID and password...

EUVD-2026-80226

QND uses a hard-coded cryptographic key, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to obtain administrator credentials, including an ID and password...

CVE-2026-78225

Wärtsilä FOS-Onboard contains a hardcoded cryptographic server key in the deployer-ng Update Controller component. This allows an attacker with network access and high complexity to achieve full compromise of confidentiality, integrity, and availability on both the vulnerable and subsequent syste...

CVE-2026-89026

The Issabel Framework, the web framework supporting Issabel PBX software, before commit b97dbaf contains a hard-coded HS256 JWT signing key in the pbxapi index.php file that is identical across every installation, allowing unauthenticated remote attackers to forge valid bearer tokens. Attackers c...

FreeBSD : cjose -- Use of Hard-coded Cryptographic Key (3a38fdda-b05a-11f1-9369-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 3a38fdda-b05a-11f1-9369-b42e991fc52e advisory. https://github.com/OpenIDC/cjose/security/advisories/GHSA-f6wf-pqg3-6wqq reports: OpenIDC/cjose is a C...

CVE-2026-90510

A security vulnerability has been detected in dromara orion-visor up to 2.5.7. This affects the function HostKeyServiceImpl.encryptKey of the file...

CVE-2026-90510

dromara orion-visor (up to version 2.5.7) contains a hard-coded AES cryptographic key in the HostKeyServiceImpl.encryptKey function within the asset-service module. This CWE-321 flaw allows a remote attacker, with no privileges or user interaction, to decrypt SSH private keys and host passwords s...

CVE-2026-90510 dromara orion-visor HostKeyServiceImpl.java HostKeyServiceImpl.encryptKey hard-coded key

A security vulnerability has been detected in dromara orion-visor up to 2.5.7. This affects the function HostKeyServiceImpl.encryptKey of the file...

CVE-2026-90510 dromara orion-visor HostKeyServiceImpl.java HostKeyServiceImpl.encryptKey hard-coded key

A security vulnerability has been detected in dromara orion-visor up to 2.5.7. This affects the function HostKeyServiceImpl.encryptKey of the file...

EUVD-2026-76983

A security vulnerability has been detected in dromara orion-visor up to 2.5.7. This affects the function HostKeyServiceImpl.encryptKey of the file...

CVE-2026-79735

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information...

CVE-2026-79735

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information...