WIT SynApps Runtime through 1.4.11 contains a hardcoded credentials vulnerability that allows unauthenticated attackers to recover static OAuth clientId and clientSecret values ...

CVE-2026-7003

WIT SynApps Runtime through 1.4.11 contains a hardcoded credentials vulnerability that allows unauthenticated attackers

来源摘录 · NVD / GitHub Advisory

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76, `verify_graylog_header` in `backend/app/active_response/...

CVE-2026-61729

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76,

来源摘录 · NVD

Songloft 2.9.0 before 2.13.6 contains a hardcoded credentials vulnerability that allows adjacent network attackers to authenticate as administrator using the fixed admin/admin p...

CVE-2026-119662

Songloft 2.9.0 before 2.13.6 contains a hardcoded credentials vulnerability that allows adjacent network attackers to au

来源摘录 · NVD

A sensitive information exposure vulnerability exists on the Foxit official website because JavaScript code contains third-party authorization information. This may allow unauth...

CVE-2026-111419

A sensitive information exposure vulnerability exists on the Foxit official website because JavaScript code contains thi

来源摘录 · NVD

Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected instal...

CVE-2026-118601

Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerability. This vulnerability allows network-adjace

来源摘录 · NVD

The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active...

CVE-2026-18449

The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to c

历史摘要 · 未重新核验 · NVD

Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.1, the file .env committed in the Part-DB repository contains a fixed valu...

CVE-2026-54631

Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.1, the file .env

来源摘录 · NVD

The authentication framework used by affected Kiloview E3 NDI encoder firmware signs session JSON...

CVE-2026-92450

The authentication framework used by affected Kiloview E3 NDI encoder firmware signs session JSON Web Tokens using an HM

历史摘要 · 未重新核验 · GitHub Advisory

Use of Hard-coded Credentials vulnerability in Drupal SAML SSO - Service Provider allows...

CVE-2026-87950

Use of Hard-coded Credentials vulnerability in Drupal SAML SSO - Service Provider allows Retrieve Embedded Sensitive Da

历史摘要 · 未重新核验 · GitHub Advisory

Use of Hard-coded Credentials vulnerability in Drupal SAML SSO - Service Provider allows Retrieve Embedded Sensitive Data. This issue affects SAML SSO - Service Provider versi...

CVE-2026-87950

Use of Hard-coded Credentials vulnerability in Drupal SAML SSO - Service Provider allows Retrieve Embedded Sensitive Da

历史摘要 · 未重新核验 · NVD

SAML SSO - Service Provider - Moderately critical - Embedded credentials - SA-CONTRIB-2026-148

CVE-2026-87950

Use of Hard-coded Credentials vulnerability in Drupal SAML SSO - Service Provider allows Retrieve Embedded Sensitive Da

历史摘要 · 未重新核验 · OSV.dev

The Legacy Pipe receiver protocol (handshake / sendPipeData) uses a hardcoded SUPER_USER (root) identity when executing data loading and deletion operations. A user with only SY...

CVE-2026-59229

The Legacy Pipe receiver protocol (handshake / sendPipeData) uses a hardcoded SUPER_USER (root) identity when executing

来源摘录 · NVD

Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft SQL Server...

CVE-2026-114119

Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft SQL Server administrative password that

历史摘要 · 未重新核验 · GitHub Advisory

Trigger.dev before 4.5.4 contains a hardcoded default secret vulnerability in the /coordinator...

CVE-2026-114088

Trigger.dev before 4.5.4 contains a hardcoded default secret vulnerability in the /coordinator Socket.IO namespace that

历史摘要 · 未重新核验 · GitHub Advisory

Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft SQL Server administrative password that is shared across all installations and cannot be changed ...

CVE-2026-114119

Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft SQL Server administrative password that

来源摘录 · NVD

Trigger.dev before 4.5.4 contains a hardcoded default secret vulnerability in the /coordinator Socket.IO namespace that allows unauthenticated attackers to connect using the pub...

CVE-2026-114088

Trigger.dev before 4.5.4 contains a hardcoded default secret vulnerability in the /coordinator Socket.IO namespace that

历史摘要 · 未重新核验 · NVD

IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow...

CVE-2026-109126

IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a physically proximate

历史摘要 · 未重新核验 · GitHub Advisory

IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a physically proximate attacker to gain elevated privileges due to the use of h...

CVE-2026-109126

IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a physically proximate

历史摘要 · 未重新核验 · NVD

agent-router: MCP session resume does not verify the embedded anti-hijacking subject; default Helm seed makes session IDs forgeable

## Summary The MCP proxy's client-facing session ID embeds the authenticated caller's subject (JWT `sub` claim) specifi

历史摘要 · 未重新核验 · GitHub Advisory

Jooan JA-A12 IP cameras with firmware 009_20171107 and 05.02.31.105 contain a remote code...

CVE-2026-111281

Jooan JA-A12 IP cameras with firmware 009_20171107 and 05.02.31.105 contain a remote code execution vulnerability that a

历史摘要 · 未重新核验 · GitHub Advisory