Login Sign Up

CWE-798: CWE-798

456
Total CVEs
262
Critical
146
High
8.8
Avg CVSS
1
In CISA KEV

Yearly Trend

2026
24
2025
100
2024
97
2023
66
2022
69

Top Affected Vendors

1 Ibm 20
2 Fiberhome 15
3 Dlink 14
4 Totolink 7
5 Siemens 6
6 Schneider Electric 6
7 Cisco 5
8 Solarwinds 5
9 Fortinet 4
10 Tenda 4

All CWE-798 CVEs (456)

CVE-2025-59091
N/A

The Kaba exos 9300 datapoint server contains hardcoded credentials for four users, allowing unauthorized access to door access control systems. Attack...

Jan 26, 2026
CVE-2025-59092
N/A

This vulnerability allows unauthenticated attackers to send arbitrary status information to the Kaba exos 9300 access control system via an exposed RP...

Jan 26, 2026
CVE-2025-59095
N/A

This CVE reveals hard-coded cryptographic secrets in exos 9300 software components, allowing attackers to decrypt sensitive data like user PINs stored...

Jan 26, 2026
CVE-2025-7072
N/A

This CVE describes a critical vulnerability in KAON CG3000TC and CG3000T routers where hard-coded credentials are embedded in the firmware in clear te...

Jan 9, 2026
CVE-2025-13954
N/A

This vulnerability involves hard-coded cryptographic keys in the Admin UI of EZCast Pro II, allowing attackers to bypass authorization checks and gain...

Dec 10, 2025
CVE-2025-34501
N/A

Deck Mate 2 card shufflers contain hard-coded administrative credentials for multiple enabled services (SSH, HTTP, Telnet, SMB, X11). Attackers with p...

Nov 3, 2025

About CWE-798 (CWE-798)

Our database tracks 456 CVEs classified as CWE-798, with 262 rated critical and 146 rated high severity. The average CVSS score for CWE-798 vulnerabilities is 8.8.

External reference: View CWE-798 on MITRE CWE →

Monitor CWE-798 Vulnerabilities

Get alerted when new CWE-798 CVEs affect your infrastructure.

Start Monitoring Free