11462 matches found
CVE-2026-50603 Hard-coded encryption key vulnerability in Acer Agent Service for NitroSense and PredatorSense
A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES encryption key within the software. Under certain circumstances, a local attacker may be able to use the embedded key to...
CVE-2026-50603
CVE-2026-50603 affects the Acer Agent Service component bundled with NitroSense and PredatorSense . The root cause is a hard-coded AES encryption key embedded in the software, which under certain circumstances allows a local attacker (with no privileges and no user interaction) to access protecte...
CVE-2026-50603 Hard-coded encryption key vulnerability in Acer Agent Service for NitroSense and PredatorSense
A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES encryption key within the software. Under certain circumstances, a local attacker may be able to use the embedded key to...
PT-2026-94153
Name of the Vulnerable Software and Affected Versions Acer Agent Service affected versions not specified Description The Acer Agent Service component, included with NitroSense and PredatorSense, uses a hard-coded AES encryption key. This allows a local attacker to potentially access protected...
CVE-2026-50606: Use of Hard-coded Cryptographic Key
A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES encryption key within the software. Under certain circumstances, a local attacker may be able to use the embedded key ...
CVE-2026-81478: Use of Hard-coded Cryptographic Key
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...
CVE-2026-50603: Use of Hard-coded Cryptographic Key
A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES encryption key within the software. Under certain circumstances, a local attacker may be able to use the embedded key to...
CVE-2026-52727: Use of Hard-coded Cryptographic Key
lxc-ci contains continuous integration and image-build scripts for LXC. Prior to the 2026-05-28 Arch Linux image publication, images built from images/archlinux.yaml retain the same pacman local-signing private key in /etc/pacman.d/gnupg and redistribute it to every container or virtual machine...
PT-2026-94233
Name of the Vulnerable Software and Affected Versions Dell OpenManage Server Administrator versions prior to 11.1.0.3 Description An issue exists involving the use of a hard-coded cryptographic key. This allows an unauthenticated attacker with remote access to potentially gain unauthorized access...
PT-2026-94189
Name of the Vulnerable Software and Affected Versions Acer System Monitoring affected versions not specified Description The Acer System Monitoring component, included with NitroSense and PredatorSense, contains a hard-coded AES encryption key. AES Advanced Encryption Standard is a symmetric bloc...
CVE-2026-81440: Use of Hard-coded Credentials
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Credentials vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...
PT-2026-94231
Name of the Vulnerable Software and Affected Versions Dell OpenManage Server Administrator versions prior to 11.1.0.3 Description An issue exists where hard-coded credentials are used, allowing an unauthenticated attacker with remote access to potentially gain unauthorized access to the system...
Use of Hard-coded Credentials
Overview feast is a Python SDK for Feast Affected versions of this package are vulnerable to Use of Hard-coded Credentials via unverified intra-server JWT handling in sdk/python/feast/permissions/auth/oidctokenparser.py, sdk/python/feast/permissions/auth/kubernetestokenparser.py, and...
Exploit for CVE-2026-89026
CVE-2026-89026 Issabel pbxapi hard coded JWT RCE POC Issabel...
Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution
A critical security flaw in Issabel Framework, a web-based framework for the open-source unified communications PBX software, has come under active exploitation. The vulnerability in question is CVE-2026-89026 CVSS v3.1 score: 9.8/CVSS v4.0 score: 9.3, which can allow an unauthenticated remote...
CVE-2026-81326
QND uses a hard-coded cryptographic key, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to obtain administrator credentials, including an ID and password...
CVE-2026-81326
QND uses a hard-coded cryptographic key, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to obtain administrator credentials, including an ID and password...
CVE-2026-81326
QND uses a hard-coded cryptographic key, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to obtain administrator credentials, including an ID and password...
CVE-2026-81326
CVE-2026-81326 affects QND by QualitySoft, a product whose client is installed on Windows PCs. The root cause is a hard-coded cryptographic key , which may allow a local attacker with logged-in access to the client machine to obtain administrator credentials , including an ID and password. The vu...
EUVD-2026-80226
QND uses a hard-coded cryptographic key, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to obtain administrator credentials, including an ID and password...