Lucene search
+L

11453 matches found

Vulnrichment
Vulnrichment
•added 2026/10/01 8:55 p.m.•10 views

CVE-2026-27874

: Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FS32 allows : Exploitation of Default or Hard-coded Credentials. This issue affects EasyIO FS32: before 3.0b63...

5.9CVSS5.8AI score0.00135EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/01 8:55 p.m.•11 views

EUVD-2026-91061

: Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FS32 allows : Exploitation of Default or Hard-coded Credentials. This issue affects EasyIO FS32: before 3.0b63...

5.9CVSS5.8AI score0.00135EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/01 8:55 p.m.•8 views

CVE-2026-27874

The Johnson Controls EasyIO FS32 software is affected by a Use of Hard-coded Credentials vulnerability (CWE-798) in versions prior to 3.0b63 . An attacker can exploit these hard-coded or default credentials to gain unauthorized access to the system. To remediate this issue, users should update Ea...

5.9CVSS5.8AI score0.00135EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/01 8:55 p.m.•50 views

CVE-2026-27874

: Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FS32 allows : Exploitation of Default or Hard-coded Credentials. This issue affects EasyIO FS32: before 3.0b63...

5.9CVSS0.00135EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/01 8:17 p.m.•13 views

CVE-2026-102666

The Joyland AI app contains hard-coded credentials for the GeTui push notification service, allowing an attacker to access the GeTui REST API and send push notifications containing arbitrary content to any user, group of users, or all users of the app at once...

6.9CVSS0.00166EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/01 7:41 p.m.•41 views

CVE-2026-102666 Joyland AI hard-coded credentials for push notifications

The Joyland AI app contains hard-coded credentials for the GeTui push notification service, allowing an attacker to access the GeTui REST API and send push notifications containing arbitrary content to any user, group of users, or all users of the app at once...

6.9CVSS0.00166EPSS
SaveExploits0References2
CVE
CVE
•added 2026/10/01 7:41 p.m.•9 views

CVE-2026-102666

The Joyland AI app contains hard-coded credentials for the GeTui push notification service . This vulnerability allows an attacker to access the GeTui REST API to send push notifications with arbitrary content to any individual user, specific groups, or the entire user base of the app. No specifi...

6.9CVSS6AI score0.00166EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/01 7:41 p.m.•16 views

EUVD-2026-91023

The Joyland AI app contains hard-coded credentials for the GeTui push notification service, allowing an attacker to access the GeTui REST API and send push notifications containing arbitrary content to any user, group of users, or all users of the app at once...

6.9CVSS6AI score0.00166EPSS
SaveExploits0References2
NVD
NVD
•added 2026/10/01 5:17 a.m.•20 views

CVE-2026-82829

Hitachi Coding Software Suite contains a vulnerability related to Hidden Functionality vulnerability which allows an attacker to gain unauthorized access by exploiting hidden accounts or hard coded credentials. This issue affects Hitachi Coding Software Suite: through 3.3.0...

9.8CVSS0.0029EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/01 5:17 a.m.•24 views

CVE-2026-82827

Hitachi Coding Software Suite contains a vulnerability related to Use of Hard-coded Cryptographic Key. The Hardcoding of JWT signing secret key allows an attacker to generate unauthorized Bearer tokens and exploit administrative functions. This issue affects Hitachi Coding Software Suite: through...

9.8CVSS0.00268EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/01 4:57 a.m.•47 views

CVE-2026-82827 A hard-coded JWT signing secret key may allow administrative functions to be abused using fraudulently generated Bearer tokens

Hitachi Coding Software Suite contains a vulnerability related to Use of Hard-coded Cryptographic Key. The Hardcoding of JWT signing secret key allows an attacker to generate unauthorized Bearer tokens and exploit administrative functions. This issue affects Hitachi Coding Software Suite: through...

9.8CVSS0.00268EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/01 4:57 a.m.•15 views

CVE-2026-82827 A hard-coded JWT signing secret key may allow administrative functions to be abused using fraudulently generated Bearer tokens

Hitachi Coding Software Suite contains a vulnerability related to Use of Hard-coded Cryptographic Key. The Hardcoding of JWT signing secret key allows an attacker to generate unauthorized Bearer tokens and exploit administrative functions. This issue affects Hitachi Coding Software Suite: through...

9.8CVSS5.9AI score0.00268EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/01 4:57 a.m.•33 views

CVE-2026-82827

The Hitachi Coding Software Suite (versions through 3.3.0 ) is vulnerable to a Use of Hard-coded Cryptographic Key flaw. The software uses a hard-coded JWT signing secret key , which enables an attacker to generate unauthorized Bearer tokens . By using these fraudulent tokens, an attacker can exp...

9.8CVSS5.9AI score0.00268EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/01 4:57 a.m.•14 views

EUVD-2026-90492

Hitachi Coding Software Suite contains a vulnerability related to Use of Hard-coded Cryptographic Key. The Hardcoding of JWT signing secret key allows an attacker to generate unauthorized Bearer tokens and exploit administrative functions. This issue affects Hitachi Coding Software Suite: through...

9.8CVSS5.9AI score0.00268EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/01 4:57 a.m.•16 views

EUVD-2026-90490

Hitachi Coding Software Suite contains a vulnerability related to Hidden Functionality vulnerability which allows an attacker to gain unauthorized access by exploiting hidden accounts or hard coded credentials. This issue affects Hitachi Coding Software Suite: through 3.3.0...

9.8CVSS5.9AI score0.0029EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/01 4:57 a.m.•40 views

CVE-2026-82829

The Hitachi Coding Software Suite (affected versions through 3.3.0 ) contains a Hidden Functionality vulnerability. An attacker can exploit hidden accounts or hard-coded credentials to gain unauthorized access without undergoing the legitimate authentication process. The impact is categorized as ...

9.8CVSS5.9AI score0.0029EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/01 12:00 a.m.•8 views

PT-2026-104030

Name of the Vulnerable Software and Affected Versions EasyIO FG versions prior to 2.0b52 Description Johnson Controls EasyIO FG contains hard-coded credentials, which can be leveraged to perform password spraying. Password spraying is a type of brute-force attack where a common password is tried...

7.2CVSS5.7AI score0.00087EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/10/01 12:00 a.m.•15 views

PT-2026-104023

Name of the Vulnerable Software and Affected Versions EasyIO FS32 versions prior to 3.0b63 Description Johnson Controls EasyIO FS32 contains a hard-coded cryptographic key, which is a fixed secret used for encryption or decryption. This flaw allows an attacker to retrieve embedded sensitive data...

10CVSS5.7AI score0.00295EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/01 12:00 a.m.•10 views

PT-2026-103686

Name of the Vulnerable Software and Affected Versions Hitachi Coding Software Suite versions prior to 3.3.0 Description The software contains a flaw involving the use of a hard-coded cryptographic key. Specifically, the JWT JSON Web Token signing secret key is hard-coded, which allows an attacker...

9.8CVSS5.7AI score0.00268EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/01 12:00 a.m.•6 views

PT-2026-104020

Name of the Vulnerable Software and Affected Versions EasyIO FS32 versions prior to 3.0b63 Description Johnson Controls EasyIO FS32 contains hard-coded credentials, which allows an attacker to exploit these default credentials to gain unauthorized access to the system. Recommendations Update Easy...

5.9CVSS5.8AI score0.00135EPSS
SaveExploits0References3
Rows per page
Query Builder