hardcoded_credentials vulnerabilities
hardcoded_credentials in numbers
sbomify tracks 3,850 hardcoded_credentials vulnerabilities. Most are found in network device (25%), server software (25%) and iot or embedded device (20%).
How to fix hardcoded_credentials vulnerabilities
Most exploited hardcoded_credentials vulnerabilities
- CVE-2026-22769 Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials
- CVE-2024-20439 Cisco Smart Licensing Utility Static Credential
- CVE-2023-45249 Acronis Cyber Infrastructure (ACI) Insecure Default Password
- CVE-2024-3272 D-Link Multiple NAS Devices Use of Hard-Coded Credentials
- CVE-2023-6448 Unitronics Vision PLC and HMI Insecure Default Password
- CVE-2022-26138 Atlassian Questions For Confluence App Hard-coded Credentials
- CVE-2020-29583 Zyxel Multiple Products Use of Hard-Coded Credentials
- CVE-2020-8657 EyesOfNetwork Use of Hard-Coded Credentials
- CVE-2016-4437 Apache Shiro Code Execution
- CVE-2024-28987 SolarWinds Web Help Desk Hardcoded Credential
- CVE-2023-27524 Apache Superset Insecure Default Initialization of Resource
- CVE-2021-44207 Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability
Recently published
- CVE-2026-105815 Credential Material Exposure Leading to Unauthorized Streamed Media-Session Access in TP-Link Tapo C210
- CVE-2026-109126 IBM Verify Identity Access and IBM Security Verify Access Hard-coded Credentials
- CVE-2026-112146 D-Link E15/M32/R15/R32 MQTT Broker passwd hard-coded credentials
- CVE-2026-112296 FlyCms through commit edfdf724 Default Super Administrator Credentials
- CVE-2026-111998 Vanus 0.8.0 through 0.9.0 Default Admin Credentials via Gateway
- CVE-2026-112014 LobsterAI before 2026.10.16 Hardcoded Password in Provider API Key Export
Other types of vulnerability
- Cross-site scripting54,178
- Memory corruption53,628
- Denial of service36,532
- 35,428
- Missing authorization28,513
- SQL injection23,565
- Path traversal19,236
- 16,160
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.