CWE-259: CWE-259

A critical vulnerability in Cisco ISE cloud deployments allows unauthenticated attackers to access shared credentials across multiple cloud environmen...

PlaciPy placement management system version 1.0.0 uses a hard-coded default password for all newly created student accounts, enabling attackers to log...

This vulnerability involves hard-coded credentials in the Apeman ID71 system configuration file, allowing remote attackers to gain unauthorized access...

This critical vulnerability in Belkin routers allows attackers to use hard-coded credentials to gain unauthorized access to the web interface. Affecte...

The Forvia Hella HELLA Driving Recorder DR 820 uses hardcoded default WiFi credentials (SSID and password 'qwertyuiop') that cannot be changed by user...

CVE-2025-27638 is a hardcoded password vulnerability in Vasion Print (formerly PrinterLogic) that allows attackers to gain unauthorized access to syst...

CVE-2025-1100 is a critical vulnerability in Q-Free MaxTime traffic management software where a hard-coded root password allows unauthenticated remote...

This vulnerability allows attackers to gain root access without authentication on affected FydeOS systems due to a wildcard root password configuratio...

The ProGauge MAGLINK LX4 CONSOLE web application contains a hardcoded administrative account with an unchangeable password, allowing attackers to gain...

Loftware Spectrum versions before 4.6 HF14 contain a hard-coded password vulnerability that allows attackers to gain unauthorized access to the system...

H3C GR1100-P routers running version v100R009 contain a hardcoded root password in the /etc/shadow file, allowing attackers to gain full administrativ...

This critical vulnerability in TOTOLINK CP450 routers allows remote attackers to access the Telnet service using a hard-coded password. Attackers can ...

ZKTeco ZKBio CVSecurity v6.1.1 contains a hardcoded cryptographic key (CWE-259), allowing attackers to decrypt sensitive data or bypass authentication...

A hard-coded password vulnerability in the telnetd functionality of LevelOne WBR-6013 routers allows attackers to execute arbitrary commands with root...

CVE-2024-4708 is a critical vulnerability in mySCADA myPRO software where attackers can use a hard-coded password to gain unauthorized access and exec...

H3C Magic R230 routers running V100R002 contain a hardcoded root password in /etc/shadow, allowing attackers to gain full administrative control. This...

CVE-2024-3699 is a critical vulnerability in drEryk Gabinet medical software where a hard-coded database password allows attackers to access sensitive...

CVE-2024-1228 is a critical vulnerability in Eurosoft Przychodnia medical software where a hard-coded database password allows attackers to access sen...

CVE-2024-2420 is a critical authentication bypass vulnerability in LenelS2 NetBox access control systems due to hardcoded credentials. Attackers can g...

CyberPower PowerPanel Business application contains a hard-coded JWT signing key, allowing attackers to forge authentication tokens and bypass securit...

This vulnerability allows remote attackers to bypass authentication and gain unauthorized access to ZLMediaKit's HTTP API interface due to a hardcoded...

CVE-2017-20039 is a critical authentication weakness in SICUNET Access Controller that allows remote attackers to bypass authentication mechanisms. Th...

Bender/ebee Charge Controllers have hardcoded SSH credentials that allow administrative access to the web-UI. This affects CC612 controllers version 5...

This vulnerability allows attackers to gain administrative access to Schneider Electric EVlink charging stations by exploiting hard-coded passwords in...

Xerox AltaLink multifunction printers have two hard-coded accounts with weak passwords that cannot be disabled. Attackers can use these credentials to...

The Reason DR60 industrial device contains a hard-coded password that cannot be changed, allowing attackers to gain unauthorized access. This affects ...

This vulnerability allows remote attackers to read sensitive information stored insecurely on affected QNAP switches. Attackers can exploit this by ac...

Hardcoded credentials in TerraMaster TOS firmware allow remote attackers to authenticate to mail/webmail servers and administration panels. This vulne...

Motorola MBTS Site Controller contains a hard-coded backdoor password in its Man Machine Interface (MMI) that cannot be changed or disabled. This allo...

This vulnerability allows unauthenticated local attackers to access Cisco Firepower Threat Defense devices using static hard-coded credentials. Attack...

Dell EMC CloudLink versions 7.1 and earlier contain hard-coded credentials that allow remote attackers with knowledge of these credentials to gain una...