# hardcoded_credentials


- [CVE-2026-22769](https://insights.sbomify.com/CVE-2026-22769/): Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials (critical 10.0, exploited in the wild)
- [CVE-2024-20439](https://insights.sbomify.com/CVE-2024-20439/): Cisco Smart Licensing Utility Static Credential (critical 9.8, exploited in the wild)
- [CVE-2023-45249](https://insights.sbomify.com/CVE-2023-45249/): Acronis Cyber Infrastructure (ACI) Insecure Default Password (critical 9.8, exploited in the wild)
- [CVE-2024-3272](https://insights.sbomify.com/CVE-2024-3272/): D-Link Multiple NAS Devices Use of Hard-Coded Credentials (critical 9.8, exploited in the wild)
- [CVE-2023-6448](https://insights.sbomify.com/CVE-2023-6448/): Unitronics Vision PLC and HMI Insecure Default Password (critical 9.8, exploited in the wild)
- [CVE-2022-26138](https://insights.sbomify.com/CVE-2022-26138/): Atlassian Questions For Confluence App Hard-coded Credentials (critical 9.8, exploited in the wild)
- [CVE-2020-29583](https://insights.sbomify.com/CVE-2020-29583/): Zyxel Multiple Products Use of Hard-Coded Credentials (critical 9.8, exploited in the wild)
- [CVE-2020-8657](https://insights.sbomify.com/CVE-2020-8657/): EyesOfNetwork Use of Hard-Coded Credentials (critical 9.8, exploited in the wild)
- [CVE-2016-4437](https://insights.sbomify.com/CVE-2016-4437/): Apache Shiro Code Execution (critical 9.8, exploited in the wild)
- [CVE-2024-28987](https://insights.sbomify.com/CVE-2024-28987/): SolarWinds Web Help Desk Hardcoded Credential (critical 9.1, exploited in the wild)
- [CVE-2023-27524](https://insights.sbomify.com/CVE-2023-27524/): Apache Superset Insecure Default Initialization of Resource (high 8.9, exploited in the wild)
- [CVE-2021-44207](https://insights.sbomify.com/CVE-2021-44207/): Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability (high 8.1, exploited in the wild)

---
From sbomify Insights: https://insights.sbomify.com/types/hardcoded-credentials/