#cwe-798
共收录 273 条相关情报。
← 返回所有主题 漏洞预警2026-09-20 发布INFO
CVE-2026-86555
The ZTE SmartLife application has a hardcoded key. The key used to decrypt account server information is stored in plain
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-20 发布INFO
CVE-2026-93970
A security flaw has been discovered in aiyiyi121 SxDevOps 1.0/1.1. This issue affects some unknown processing of the fil
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-20 发布INFO
CVE-2026-93969
A vulnerability was identified in aiyiyi121 SxDevOps 1.0/1.1. This vulnerability affects the function ensure_default_sup
历史摘要 · 未重新核验 · NVD
安全公告2026-09-20 发布INFO
CVE-2026-93970
A security flaw has been discovered in aiyiyi121 SxDevOps 1.0/1.1. This issue affects some unknown processing of the fil
历史摘要 · 未重新核验 · OSV.dev
安全公告2026-09-20 发布INFO
CVE-2026-93969
A vulnerability was identified in aiyiyi121 SxDevOps 1.0/1.1. This vulnerability affects the function ensure_default_sup
历史摘要 · 未重新核验 · OSV.dev
安全公告2026-09-18 发布INFO
CVE-2026-84034
IBM Guardium Data Protection 12.2 is vulnerable to a hardcoded credentials vulnerability in the hardware_assess/obstore
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-09-18 发布INFO
CVE-2026-84034
IBM Guardium Data Protection 12.2 is vulnerable to a hardcoded credentials vulnerability in the hardware_assess/obstore
历史摘要 · 未重新核验 · NVD
安全公告2026-09-18 发布INFO
CVE-2026-63406
### Summary
The telemetry subsystem embeds a hardcoded auth token (`"secret"`) in the public source and transmits raw CL
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-09-18 发布INFO
CVE-2026-63406
AnyCable is a realtime server for reliable two-way communication that supports any backend. Prior to 1.6.15, the telemet
历史摘要 · 未重新核验 · NVD
安全公告2026-09-18 发布INFO
CVE-2026-63406
AnyCable is a realtime server for reliable two-way communication that supports any backend. Prior to 1.6.15, the telemet
历史摘要 · 未重新核验 · OSV.dev
漏洞预警2026-09-18 发布INFO
CVE-2026-86520
Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-18 发布INFO
CVE-2026-77960
Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-17 发布INFO
CVE-2026-54767
WeGIA is a web manager for charitable institutions. Prior to 3.8.5, web/html/socio/sistema/controller/deletar_socios.php
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-17 发布INFO
CVE-2026-81440
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Credentials vulnerability
历史摘要 · 未重新核验 · NVD
安全公告2026-09-16 发布INFO
CVE-2026-92787
Feast through 0.66.0 fails to verify JWT token signatures before establishing user identity, allowing attackers to bypas
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-09-15 发布INFO
CVE-2026-68950
The affected products use hard-coded credentials, which could allow an attacker to run the ftpd service as root, providi
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-15 发布INFO
CVE-2026-66890
The affected products use hard-coded credentials, which could allow remote access to files with root privileges where FT
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-15 发布INFO
CVE-2026-16141
OpenBMC's IPMI implementation, phosphor-net-ipmid, contains a logic flaw in which an unauthenticated client can force th
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-15 发布INFO
CVE-2026-57148
PraisonAI is a multi-agent teams system. Prior to 0.1.6, praisonai_platform/services/auth_service.py falls back to the p
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-15 发布INFO
CVE-2026-57147
PraisonAI is a multi-agent teams system. Prior to 0.1.6, praisonai_platform/services/auth_service.py assigns the public
历史摘要 · 未重新核验 · NVD