Lucene search
K

3812 matches found

Positive Technologies
Positive Technologies
added 2026/05/27 12:0 a.m.8 views

PT-2026-43975

Name of the Vulnerable Software and Affected Versions IBM Controller versions 11.0.1 through 11.1.2 Description IBM Controller contains hard-coded credentials, such as passwords or cryptographic keys. These credentials are used for inbound authentication, outbound communication to external...

8.8CVSS5.8AI score0.0019EPSS
Exploits0References3
NVD
NVD
added 2026/05/20 8:16 p.m.10 views

CVE-2026-9139

Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains a hard-coded credential vulnerability in the embedded web configuration interface where authentication is implemented entirely in client-side JavaScript in login.zhtml, exposing static plaintext credentials in the page source...

9.8CVSS0.00454EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/05/20 7:35 p.m.27 views

CVE-2026-9139 Taiko AG1000-01A Rev 7.3/8 Hard-coded Credentials via login.zhtml

Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains a hard-coded credential vulnerability in the embedded web configuration interface where authentication is implemented entirely in client-side JavaScript in login.zhtml, exposing static plaintext credentials in the page source...

9.8CVSS0.00454EPSS
Exploits0References2
CVE
CVE
added 2026/05/20 7:35 p.m.14 views

CVE-2026-9139

The CVE-2026-9139 entry covers Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8, where the embedded web configuration interface authenticates purely via client-side JavaScript in login.zhtml, exposing static plaintext credentials within the page source. Unauthenticated attackers with network ...

9.8CVSS5.8AI score0.00454EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/20 7:35 p.m.4 views

CVE-2026-9139

Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains a hard-coded credential vulnerability in the embedded web configuration interface where authentication is implemented entirely in client-side JavaScript in login.zhtml, exposing static plaintext credentials in the page source...

9.8CVSS5.8AI score0.00454EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/05/20 7:35 p.m.6 views

CVE-2026-9139 Taiko AG1000-01A Rev 7.3/8 Hard-coded Credentials via login.zhtml

Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains a hard-coded credential vulnerability in the embedded web configuration interface where authentication is implemented entirely in client-side JavaScript in login.zhtml, exposing static plaintext credentials in the page source...

9.8CVSS5.8AI score0.00454EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/05/20 12:0 a.m.9 views

PT-2026-42262

Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains a hard-coded credential vulnerability in the embedded web configuration interface where authentication is implemented entirely in client-side JavaScript in login.zhtml, exposing static plaintext credentials in the page source...

9.8CVSS5.8AI score0.00454EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/05/20 12:0 a.m.7 views

Taiko AG1000-01A SMS Alert Gateway 信任管理问题漏洞

The Taiko AG1000-01A SMS Alert Gateway is an industrial communication gateway device developed by Taiko Company in Singapore. It supports SMS-based alert notifications and remote event messaging. Both the Rev 7.3 and Rev 8 versions of the Taiko AG1000-01A SMS Alert Gateway contain vulnerabilities...

9.8CVSS5.9AI score0.00454EPSS
Exploits0References1
NVD
NVD
added 2026/05/19 6:16 p.m.8 views

CVE-2026-8605

In ScadaBR version 1.2.0, a Use of Hard-Coded Credentials vulnerability could allow an attacker to access the SCADA system as admin...

9.8CVSS0.00387EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/05/19 5:8 p.m.38 views

CVE-2026-8605 Use of Hard-coded Credentials in ScadaBR

In ScadaBR version 1.2.0, a Use of Hard-Coded Credentials vulnerability could allow an attacker to access the SCADA system as admin...

5.1CVSS0.00387EPSS
Exploits0References1
CVE
CVE
added 2026/05/19 5:8 p.m.15 views

CVE-2026-8605

CVE-2026-8605 affects ScadaBR 1.2.0 via a Use of Hard-Coded Credentials vulnerability that could let an attacker access the SCADA system as admin. The provided sources specify admin-level access without authentication, with CVSS 3.1 indicating a CRITICAL impact (score 9.8) and network access with...

9.8CVSS5.8AI score0.00387EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2026/05/19 5:8 p.m.11 views

EUVD-2026-30963

In ScadaBR version 1.2.0, a Use of Hard-Coded Credentials vulnerability could allow an attacker to access the SCADA system as admin...

5.1CVSS5.8AI score0.00387EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/19 5:8 p.m.5 views

CVE-2026-8605

In ScadaBR version 1.2.0, a Use of Hard-Coded Credentials vulnerability could allow an attacker to access the SCADA system as admin...

5.1CVSS5.8AI score0.00387EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/05/19 5:8 p.m.11 views

CVE-2026-8605 Use of Hard-coded Credentials in ScadaBR

In ScadaBR version 1.2.0, a Use of Hard-Coded Credentials vulnerability could allow an attacker to access the SCADA system as admin...

5.1CVSS5.8AI score0.00387EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/05/19 12:0 a.m.6 views

Sensorweb ScadaBR 信任管理问题漏洞

Sensorweb ScadaBR is a set of open-source software developed by Sensorweb Corporation for creating automated data acquisition and monitoring applications. Version ScadaBR 1.2.0 contains a vulnerability related to trust management. This vulnerability arises from the use of hard-coded credentials,...

9.8CVSS5.8AI score0.00387EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/05/19 12:0 a.m.10 views

PT-2026-41991

In ScadaBR version 1.2.0, a Use of Hard-Coded Credentials vulnerability could allow an attacker to access the SCADA system as admin...

5.1CVSS5.8AI score0.00387EPSS
Exploits0References2
Veracode
Veracode
added 2026/05/14 6:8 p.m.9 views

Use Of Hard-coded Credentials

GoHarbor Harbor is vulnerable to Use of Hard-coded Credentials. The vulnerability is due to the presence of default hard-coded credentials in the application, which allows an attacker to gain unauthorized access to the web UI using known passwords...

9.4CVSS6.9AI score0.00498EPSS
Exploits0References5Affected Software1
EUVD
EUVD
added 2026/05/11 12:32 p.m.11 views

EUVD-2026-29046

Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains a use of hard-coded credentials vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to filesystem access for attacker...

9.8CVSS5.8AI score0.00223EPSS
Exploits0References2
NVD
NVD
added 2026/05/11 10:16 a.m.9 views

CVE-2026-40636

Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains a use of hard-coded credentials vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to filesystem access for attacker...

9.8CVSS0.00223EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/05/11 8:57 a.m.34 views

CVE-2026-40636

Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains a use of hard-coded credentials vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to filesystem access for attacker...

9.8CVSS0.00223EPSS
Exploits0References1
Rows per page
Query Builder