CWE-798 vulnerabilities

CVE-2026-54767 is a critical vulnerability in LabRedesCefetRJ's WeGIA web manager for charitable institutions. Versions prior to 3.8.5 contain an unauthenticated GET endpoint that allows remote attackers to perform destructive database truncation operations without authorization. The vulnerability arises because the endpoint's access is controlled only by a hardcoded key embedded in the public source code. Exploitation can permanently delete member and contributor records. This issue is fixed in version 3.8.5.

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Credentials vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

CVE-2026-68950 is a vulnerability in Digital Watchdog VMAX A1 G4 DVR devices caused by the use of hard-coded credentials. This flaw allows an attacker to run the ftpd service as root, granting remote root-level file access if FTP is reachable. The vulnerability has a high severity score of 8.8 and affects local network access scenarios.

CVE-2026-66890 is a critical vulnerability in Digital Watchdog VMAX A1 G4 DVR devices caused by the use of hard-coded credentials. This flaw allows remote attackers to access files with root privileges via FTP, potentially compromising the confidentiality, integrity, and availability of the affected system.

OpenBMC's IPMI implementation, phosphor-net-ipmid, contains a logic flaw in which an unauthenticated client can force the RAKP Message 1 handler to return before it overwrites the authentication object's constructor defaults. The IPMI service then accepts a RAKP Message 3 whose HMAC is computed with the constant 20-byte 'userKey' initialized from the string '0penBmc' and an often-predictable 'bmcRandomNum'. Several downstream vendors implement phosphor-net-ipmid as their IPMI stack, such as NVIDIA and H3C.

PraisonAI is a multi-agent teams system. Prior to 0.1.6, praisonai_platform/services/auth_service.py assigns the public dev-secret-change-me value to JWT_SECRET when PLATFORM_JWT_SECRET is unset, and its production guard does not run when PLATFORM_ENV is also unset because that setting defaults to dev. A remote unauthenticated attacker can mint an HS256 token with an arbitrary sub and email, and the platform's AuthService._verify_token() and get_current_user dependency accept the forged identity for protected API routes. This vulnerability is fixed in praisonai-platform 0.1.6.

PraisonAI versions prior to 0.1.6 contain an improper authentication vulnerability where the system falls back to a public default signing key if the environment variable PLATFORM_JWT_SECRET is unset. This fallback, combined with disabled startup and token-issuance guards in the default dev environment, allows unauthenticated attackers to forge JWT tokens with arbitrary user identities. The vulnerability enables impersonation of users or workspace owners when their identifiers are known. This issue is fixed in version 0.1.6.

The ANJIA AJL33PC0801 IP camera uses a hard-coded credential for bootloader authentication. An attacker with physical access to the device may leverage this weakness to gain privileged bootloader access, allowing unauthorized modification of firmware and system configuration and potentially resulting in complete device compromise.

CVE-2026-75940 is a critical vulnerability in the Lenovo Health Android Application distributed exclusively in the Chinese market. It involves the use of hard-coded credentials, which could allow an attacker to access sensitive health-related information without requiring user interaction or privileges. The affected versions range from 0 up to and including 1.5.0. The vulnerability has a high CVSS 4.0 base score of 9.3, indicating a severe risk. No patch or remediation details are currently provided by the vendor. There are no known exploits in the wild at this time.

Some Hikvision intercom products utilize an immutable factory value which should be obtained from local network or physical interaction with the device within their main card, which may allow attackers to forge a legitimate main card, thereby gaining the permission to issue cards.

DrEryk Gabinet before 11.5.0 uses hard-coded API credentials in its ticket reporting component. These credentials can be used to authenticate directly to the ticket system API. This allows an attacker to perform privileged operations beyond what is offered by the application, including reading and modifying tickets.

An attacker could derive the camera's Wi-Fi password and connect to its wireless network. This weakens or eliminates the security value of the access-point password and may expose the live video stream, device services, status interfaces, and firmware-update functionality.

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Credentials vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure.

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Credentials vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure.

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Credentials vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure.

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Credentials vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure.

Eclipse aeriOS's Identity Manager deployment in its current development version had insecure default configurations and credentials, exposing Keycloak and PostgreSQL services via Kubernetes NodePort and Docker Compose. Default fixed credentials allowed administrative access, risking unauthorized access or modification of identity data. The issue is addressed by randomizing passwords, using Kubernetes Secrets, restricting service exposure, and warning against using predefined development users in production.

Dell Secure Connect Gateway (SCG) 5.0 Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 contain a vulnerability due to the use of hard-coded credentials. This flaw could allow an unauthenticated remote attacker to bypass protection mechanisms. The vulnerability is identified as CWE-798 and has a CVSS 3.1 base score of 6.5, indicating a medium severity level.

Dell Secure Connect Gateway (SCG) 5.0 versions prior to 5.36.00.16 (appliance) and 5.36.00.00 (application) contain a vulnerability due to the use of hard-coded credentials. This flaw allows an unauthenticated remote attacker to potentially gain unauthorized access to the system. The vulnerability is identified as CWE-798 and has a high severity rating with a CVSS score of 7.7.

Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a use of hard-coded credential vulnerability. This could allow an attacker to intercept sensitive information or credentials.