共收录 273 条相关情报。
← 返回所有主题CVE-2026-81964
Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security
CVE-2026-53709
MCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.py and .env.example s
CVE-2026-53709
MCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.py and .env.example s
CVE-2026-109758
Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM bearer token are vulnerable
CVE-2026-109758
Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM bearer token are vulnerable
CVE-2026-109566
Rapyd Admin from 9.0.0 before 9.20.0 contains a hard-coded credentials vulnerability that allows remote unauthenticated
CVE-2026-108831
A security vulnerability has been detected in meetecho janus-gateway up to 1.4.2. This vulnerability affects unknown cod
CVE-2026-107437
GV-E-Map Server V18.2.0A contains a plaintext database password embedded within an application component. The credential
CVE-2026-107437
GV-E-Map Server V18.2.0A contains a plaintext database password embedded within an application component. The credential
CVE-2026-108905
pH7Builder (pH7 Social Dating CMS) before 18.6.0 contains a hard-coded API key vulnerability in Tool.class.php that allo
CVE-2026-108753
Agnaistic agnai through 1.0.555 contains a hard-coded credentials vulnerability in self-host.docker-compose.yml, which s
CVE-2026-108905
pH7Builder (pH7 Social Dating CMS) before 18.6.0 contains a hard-coded API key vulnerability in Tool.class.php that allo
CVE-2026-108905
pH7Builder (pH7 Social Dating CMS) before 18.6.0 contains a hard-coded API key vulnerability in Tool.class.php that allo
CVE-2026-108753
Agnaistic agnai through 1.0.555 contains a hard-coded credentials vulnerability in self-host.docker-compose.yml, which s
CVE-2026-108584
A security flaw has been discovered in FunnyWolf Viper up to 3.1.11. The affected element is an unknown function of the
CVE-2026-32645
Default factory credentials with administrative access are enabled and persist even after configuring other administrato
CVE-2026-105278
The published Docker image for openPDC includes a fixed administrative credential with no forced change on first use. An
CVE-2026-84891
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to u
CVE-2026-84891
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to u
CVE-2026-84250
IBM Guardium Data Protection 12.2 is vulnerable due to weak cryptographic protection and a hard-coded recovery key in th