10212 matches found
CVE-2026-81855
A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wärtsilä FOS-Onboard , a marine engine management platform. An attacker with network access and no prior privileges can exploit this to gain high confidentiality and high integrity...
CVE-2026-81855 Wärtsilä FOS-Onboard Use of Hard-coded Cryptographic Key
A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wärtsilä FOS-Onboard...
CVE-2026-78225 Wärtsilä FOS-Onboard Use of Hard-coded Cryptographic Key
A hardcoded cryptographic server key vulnerability exists in the deployer-ng Update Controller component of Wärtsilä FOS-Onboard...
CVE-2026-78225 Wärtsilä FOS-Onboard Use of Hard-coded Cryptographic Key
A hardcoded cryptographic server key vulnerability exists in the deployer-ng Update Controller component of Wärtsilä FOS-Onboard...
CVE-2026-37152
TOTOLINK X5000R V9.1.0cu.2415B20250515 was discovered to contain a hardcoded password for root access...
CVE-2026-79551
Tenda Technology Co., Ltd NVR4H CH3 v2.1 V27.5.58.6 was discovered to contain a hardcoded cryptographic key...
CVE-2026-52824
Kimai is an open-source time tracking application. Prior to 2.58.0, the official Docker image sets APPSECRET to the public value changethistosomethingunique in Dockerfile, and .docker/entrypoint.sh neither replaces nor rejects that value before Symfony uses it as kernel.secret. An unauthenticated...
EUVD-2026-78402
Kimai is an open-source time tracking application. Prior to 2.58.0, the official Docker image sets APPSECRET to the public value changethistosomethingunique in Dockerfile, and .docker/entrypoint.sh neither replaces nor rejects that value before Symfony uses it as kernel.secret. An unauthenticated...
CVE-2026-57148 praisonai-platform 0.1.4 still boots on the hardcoded JWT secret dev-secret-change-me (default-open production guard)
PraisonAI is a multi-agent teams system. Prior to 0.1.6, praisonaiplatform/services/authservice.py falls back to the public dev-secret-change-me HS256 signing key when PLATFORMJWTSECRET is unset, while the startup and token-issuance guards are disabled because PLATFORMENV also defaults to dev. An...
CVE-2026-57148 praisonai-platform 0.1.4 still boots on the hardcoded JWT secret dev-secret-change-me (default-open production guard)
PraisonAI is a multi-agent teams system. Prior to 0.1.6, praisonaiplatform/services/authservice.py falls back to the public dev-secret-change-me HS256 signing key when PLATFORMJWTSECRET is unset, while the startup and token-issuance guards are disabled because PLATFORMENV also defaults to dev. An...
PT-2026-92032
Name of the Vulnerable Software and Affected Versions Tenda Technology Co., Ltd NVR 4H CH3 version V27.5.58.6 Description The software contains a hardcoded cryptographic key, which is a fixed secret key embedded directly into the code, potentially allowing unauthorized decryption or authenticatio...
CVE-2026-78225: Use of Hard-coded Cryptographic Key
A hardcoded cryptographic server key vulnerability exists in the deployer-ng Update Controller component of Wärtsilä FOS-Onboard...
CVE-2026-79551
The Tenda Technology Co., Ltd NVR_4H (hardware version CH3 v2.1 ) running firmware V27.5.58.6 contains a hardcoded ECDSA private key and certificate within the user-x.squashfs partition. Because these keys are embedded in the read-only filesystem and are identical across all devices running this ...
CVE-2026-79551
Tenda Technology Co., Ltd NVR4H CH3 v2.1 V27.5.58.6 was discovered to contain a hardcoded cryptographic key...
CVE-2026-37152
TOTOLINK X5000R V9.1.0cu.2415B20250515 was discovered to contain a hardcoded password for root access...
PT-2026-92108
TOTOLINK X5000R V9.1.0cu.2415 B20250515 was discovered to contain a hardcoded password for root access...
EUVD-2026-78811
TOTOLINK X5000R V9.1.0cu.2415B20250515 was discovered to contain a hardcoded password for root access...
EUVD-2026-78815
Tenda Technology Co., Ltd NVR4H CH3 v2.1 V27.5.58.6 was discovered to contain a hardcoded cryptographic key...
PT-2026-93182
Name of the Vulnerable Software and Affected Versions Wärtsilä FOS-Onboard affected versions not specified Description A hardcoded cryptographic client authentication key exists within the robot testing framework component. This issue allows for the potential bypass of authentication mechanisms d...