CVE-2026-102812 is a vulnerability in TP-Link RE305 v3 and Archer C7 v5 devices where a hard-coded AES-128 cryptographic key and initialization vector are embedded in the firmware's configuration backup mechanism. This flaw allows attackers who obtain a configuration backup file to decrypt it and access sensitive information such as administrator passwords and Wi-Fi credentials. The vulnerability has a CVSS 4.0 base score of 6.9 (medium severity). Fixed versions 1.1.8 Build 20260921 Rel. 42853 and 1.3.1 Build 20260821 Rel. 41256 address this issue.
CVE-2026-111460 is a vulnerability in the Moxa OnCell G3150A-LTE Series involving the use of a hard-coded cryptographic key. An unauthenticated remote attacker can potentially obtain this shared key material if the device has not regenerated its cryptographic keys. This exposure allows the attacker to impersonate affected devices, risking the confidentiality and integrity of management communications. The vulnerability affects version 1.0.0 of the product. The CVSS 4.0 score is 7.7, indicating high severity.
CVE-2026-71456 is a vulnerability in Johnson Controls Kantech Entrapass before version 9.20. It involves the use of a hard-coded cryptographic key, which enables a Padding Oracle Crypto Attack. This flaw is addressed in version 9.20.
This vulnerability exists in the CreditNirvana Agentic AI Call Centre application due to hardcoded static API Key in the client side JavaScript bundle. An unauthenticated remote attacker could exploit this vulnerability by downloading client side JavaScript files and extracting API key, which could lead to make arbitrary API calls to retrieve call transcripts and recordings through the application API of the targeted system.
CVE-2026-89052 is a vulnerability in TP-Link Archer C6 V2 devices caused by the use of a hardcoded cryptographic key shared universally across devices. This flaw allows attackers who obtain encrypted configuration files or protected credential data to decrypt and recover plaintext credentials, including administrative credentials. The vulnerability has a medium severity rating and is fixed in version 1.2.1 Build 260902.
IBM Guardium Data Protection versions 12.1 and 12.2 contain a vulnerability due to the use of a hard-coded cryptographic key. This flaw could allow a remote attacker to obtain sensitive information. The vulnerability is identified as CWE-321 and has a high severity rating with a CVSS score of 8.1.
A hard-coded cryptographic key vulnerability exists in the `/usr/bin/sysman` of some of Moxa's industrial computing products. An unauthenticated attacker with adjacent network access could exploit the exposed private key material to compromise the confidentiality and integrity of communications.
CVE-2026-105035 is a high-severity vulnerability in the EnergizeLab FirmwareUpdater where a hard-coded AES cryptographic key is used across all installations. This flaw allows an attacker who obtains the key to decrypt and forge firmware packages for any device trusting the updater, compromising confidentiality, integrity, and availability.
CVE-2026-108336 is a critical vulnerability in Hitachi Vantara Remot Ops Agent versions 1.60 through 2.0. The vulnerability arises from the use of a default self-signed SSL certificate to sign JWT access tokens for user authentication. An attacker who exploits this can sign JWT tokens and bypass login, gaining administrative access to the application. However, device credentials and customer data are not accessible through this vulnerability.
SeaweedFS versions 4.0.388 up to but not including 4.41 contain a hard-coded unencrypted Ed25519 private host key in the SFTP Helm chart. This vulnerability allows an attacker who can intercept or redirect client traffic to impersonate the SFTP endpoint, potentially exposing password credentials or data sent to the rogue endpoint. The issue is fixed in version 4.41.
CVE-2026-107171 is a medium severity vulnerability in Trellix Agent version 5.8.4 involving the use of a hard-coded cryptographic key in the mfecryptc.dll component. This flaw allows regular users to decrypt the database, potentially exposing sensitive information. The vulnerability has a CVSS 4.0 base score of 6.9, indicating a moderate impact with local attack vector and low privileges required. There is no indication of active exploitation in the wild or available patches at this time.
CVE-2026-53709 is a critical improper authentication vulnerability in IBM mcp-context-forge prior to version 1.0.2. The product shipped with a known JWT secret key, allowing remote unauthenticated attackers to forge administrator tokens. This flaw enables attackers to maintain administrative access despite password changes, account deletions, or session revocations, leading to potential disclosure, modification, and disruption of the service. The issue is fixed in version 1.0.2.
Huawei openUBMC contains a hard-coded cryptographic key used for SNMPv3 authentication and encryption. This key is the same across units and is not changed by administrator password resets, allowing an attacker who obtains the key from the open-source build to authenticate and decrypt SNMPv3 traffic on any affected device. SNMP access grants full administrative privileges, including system reset and firmware upgrades, increasing the risk of device compromise.
Progress Software Corporation MarkLogic Server versions 11.0.0 through before 11.3.7 and 12.0.0 through before 12.1.0 contain a Server-Side Request Forgery (SSRF) vulnerability in deprecated OpsDirector functionality. This flaw allows an unauthenticated remote attacker to make unauthorized requests to internal services or forge trusted requests, potentially leading to unauthorized access to protected information. The vulnerability has a high severity with a CVSS score of 7.5.
In Progress ShareFile Storage Zones Controller v5.12.6 and below, processing of queue items can send acknowledgements to an unvalidated callback URL, this behavior together with a race condition allows the attacker to cause FileCopyService to consume attacker-controlled metadata and content. Exploitation requires control over copy queue work and a race condition.
A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentication across deployments due to the use of a hard coded cryptographic key.
CVE-2026-34499 is a high-severity vulnerability in Johnson Controls ADVMS before version 3.10. It involves the use of a hard-coded cryptographic key, which allows an attacker with limited privileges to read sensitive constants within the executable. This vulnerability has a CVSS 4.0 score of 8.5, indicating significant impact on confidentiality, integrity, and availability. No official patch or remediation information is provided in the available data.
Dell Command | Configure (DCC) versions prior to 5.2.3.35 contain a vulnerability due to the use of a hard-coded cryptographic key. This flaw could allow an unauthenticated attacker with local access to potentially disclose sensitive information. The vulnerability is identified as CWE-321 and has a medium severity rating with a CVSS score of 6.2.
This vulnerability exists in the Schmooze app due to the use of hardcoded credentials and cryptographic keys in the client application. An unauthenticated remote attacker could exploit this vulnerability by decompiling the distributed application package and extracting the embedded credentials and cryptographic keys.
Successful exploitation of this vulnerability could allow the attacker to gain unauthorized access to backend and cloud resources and forge client requests on the targeted system.
Armatura One versions prior to 4.7.2 and 4.6.1 store database and message-broker credentials in an install configuration file encrypted with AES-128-CBC using fixed keys embedded in the software. These fixed encryption keys and initialization vectors are identical across all installations, allowing an attacker with access to the installation package and the encrypted configuration file to decrypt credentials. This vulnerability is classified as CWE-321 and has a high severity with a CVSS score of 8.4.