CWE-1394 · 25 records

Use of Default Cryptographic Key

CVEs in this class

26 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2024-48956No exploit	Serviceware Processes 6.0 through 7.3 before 7.4 allows attackers without valid authentication to send a specially crafted HTTP request to aCWE-1394 pre-auth RCE	Critical9.8	—	0.8%	Dec 9, 2024
39Monitor	CVE-2025-44954No exploit	RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account.commscope · ruckus smartzone firmware · CWE-1394 Pre-auth	Critical9.8	—	0.7%	Aug 4, 2025
39Monitor	CVE-2025-41742No exploit	Sprecher Automation: SPRECON-E series has a critical vulnerability due to the use of static cryptographic keys in system componentssprecher-automation · sprecon-e-c firmware · CWE-1394 Pre-auth	Critical9.8	—	0.4%	Dec 2, 2025
37Monitor	CVE-2026-119660No exploit	MuseBot before 2.0.0 Authentication Bypass via Hard-Coded Session Keyyincongcyincong · musebot · CWE-1394 Pre-auth Auth bypass	Critical9.3	—	0.5%	5 days ago
37Monitor	CVE-2026-120442No exploit	ape-volo-admin before 3.6.1 Hardcoded JWT Signing Key Authentication Bypassxianhc · ape-volo-admin · CWE-1394 Pre-auth Auth bypass	Critical9.3	—	0.4%	2 days ago
36Monitor	CVE-2020-37281No exploit	Gravitee API Management through 4.12.22 Default JWT Secret Authentication Bypassgravitee · gravitee api management · CWE-1394 Pre-auth Auth bypass	Critical9.2	—	0.8%	Oct 14, 2026
36Monitor	CVE-2024-29037No exploit	Default secret use for initial deploymentdatahub · datahub-helm · CWE-1394 Pre-auth	Critical9.1	—	0.6%	Mar 20, 2024
36Monitor	CVE-2026-75870No exploit	Punk versions before 0.18 for Perl allow session cookie forgery via an empty default HMAC key when a session is declared without a secretCWE-1394 Pre-auth	Critical9.1	—	0.4%	Aug 22, 2026
36Monitor	CVE-2025-41744No exploit	Sprecher Automation: SPRECON-E series has static default key material for TLS connectionssprecher-automation · sprecon-e-c firmware · CWE-1394 Pre-auth	Critical9.1	—	0.4%	Dec 2, 2025
36Monitor	CVE-2024-1275No exploit	Vulnerability in Baxter Welch Allyn Connex Spot Monitorbaxter · welch allyn connex spot monitor · CWE-1394 Pre-auth	Critical9.1	—	0.3%	May 31, 2024
36Monitor	CVE-2025-55049No exploit	Use of Default Cryptographic Key (CWE-1394)baicells · neutrino430 · CWE-1394 Pre-auth	Critical9.1	—	0.2%	Sep 9, 2025
34Monitor	CVE-2026-121818No exploit	About Time Technologies｜Herowatch Go - Security Misconfigurationabout time technologies · herowatch go · CWE-1394 RCE Local privilege escalation	High8.5	—	—	Today
33Monitor	CVE-2026-72895No exploit	A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13), SIMATIC IPC RW-543A (All versions < V1.1.4), SIMATIC Isiemens · simatic ipc bx-21a · CWE-1394	High8.4	—	0.1%	Oct 13, 2026
30Monitor	CVE-2023-6451No exploit	Publicly Known Cryptographic Machine Key In Procura Portal Applicationalayacare · procura · CWE-1394 Pre-auth	High7.5	—	0.5%	Feb 16, 2024
29Monitor	CVE-2026-107177No exploit	Express Gateway through 1.16.11 Hardcoded Default cipherKey Exposes OAuth Tokensexpressgateway · express-gateway · CWE-1394	High7.4	—	0.3%	Oct 7, 2026
27Monitor	CVE-2026-111367No exploit	BillionMail through 4.9 Forgeable JWTs via Default Signing Keyaapanel · billionmail · CWE-1394 Pre-auth	Medium6.9	—	0.3%	Oct 15, 2026
25Monitor	CVE-2026-54887No exploit	DTLS server cookie bypass during startup window due to empty initial cookie secreterlang · erlang/otp · CWE-1394 Pre-auth	Medium6.3	—	0.2%	Jul 2, 2026
24Monitor	CVE-2026-5039No exploit	Predictable Default Cryptographic Key Used for DES Encryption in TP-Link TL-WL841Ntp-link · tl-wr841n firmware · CWE-1394 Pre-auth	Medium6.1	—	0.1%	Apr 23, 2026
23Monitor	CVE-2026-20709No exploit	Use of Default Cryptographic Key in the hardware for some Intel(R) Pentium(R) Processor Silver Series, Intel(R) Celeron(R) Processor J SerieCWE-1394	Medium5.8	—	0.1%	Apr 8, 2026
22Monitor	CVE-2025-1688No exploit	System configuration password resetmilestone systems · xprotect vms · CWE-1394	Medium5.5	—	0.2%	Apr 15, 2025
21Monitor	CVE-2026-92777No exploit	A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass dlenovo · idea tab pro (tb373fu) · CWE-1394 RCE	Medium5.4	—	0.1%	Oct 16, 2026
17Monitor	CVE-2025-26849No exploit	There is a Hard-coded Cryptographic Key in Docusnap 13.0.1440.24261, and earlier and later versions.docusnap · docusnap · CWE-1394	Medium4.3	—	0.2%	Mar 4, 2025
12Monitor	CVE-2026-25815No exploit	Fortinet FortiOS through 7.6.6 allows attackers to decrypt LDAP credentials stored in device configuration files, as exploited in the wild ffortinet · fortios · CWE-1394	Low3.2	—	0.1%	Feb 5, 2026
11Monitor	CVE-2026-2215No exploit	rachelos WeRSS we-mp-rss JWT auth.py default keyrachelos · werss we-mp-rss · CWE-1394 Pre-auth	Low2.9	—	0.3%	Feb 9, 2026
9Monitor	CVE-2024-11619No exploit	macrozheng mall JWT Token default keymacrozheng · mall · CWE-1394 Pre-auth	Low2.3	—	0.7%	Nov 22, 2024

CVE-2024-48956
39Monitor
Serviceware Processes 6.0 through 7.3 before 7.4 allows attackers without valid authentication to send a specially crafted HTTP request to a
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
Dec 9, 2024
CVE-2025-44954
39Monitor
RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
commscope · ruckus smartzone firmwareAug 4, 2025
CVE-2025-41742
39Monitor
Sprecher Automation: SPRECON-E series has a critical vulnerability due to the use of static cryptographic keys in system components
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
sprecher-automation · sprecon-e-c firmwareDec 2, 2025
CVE-2026-119660
37Monitor
MuseBot before 2.0.0 Authentication Bypass via Hard-Coded Session Key
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
yincongcyincong · musebot5 days ago
CVE-2026-120442
37Monitor
ape-volo-admin before 3.6.1 Hardcoded JWT Signing Key Authentication Bypass
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
xianhc · ape-volo-admin2 days ago
CVE-2020-37281
36Monitor
Gravitee API Management through 4.12.22 Default JWT Secret Authentication Bypass
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
gravitee · gravitee api managementOct 14, 2026
CVE-2024-29037
36Monitor
Default secret use for initial deployment
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
datahub · datahub-helmMar 20, 2024
CVE-2026-75870
36Monitor
Punk versions before 0.18 for Perl allow session cookie forgery via an empty default HMAC key when a session is declared without a secret
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
Aug 22, 2026
CVE-2025-41744
36Monitor
Sprecher Automation: SPRECON-E series has static default key material for TLS connections
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
sprecher-automation · sprecon-e-c firmwareDec 2, 2025
CVE-2024-1275
36Monitor
Vulnerability in Baxter Welch Allyn Connex Spot Monitor
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
baxter · welch allyn connex spot monitorMay 31, 2024
CVE-2025-55049
36Monitor
Use of Default Cryptographic Key (CWE-1394)
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
baicells · neutrino430Sep 9, 2025
CVE-2026-121818
34Monitor
About Time Technologies｜Herowatch Go - Security Misconfiguration
HighCVSS 8.5No exploit
- RCE
- Local privilege escalation
about time technologies · herowatch goToday
CVE-2026-72895
33Monitor
A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13), SIMATIC IPC RW-543A (All versions < V1.1.4), SIMATIC I
HighCVSS 8.4No exploitEPSS 0%
siemens · simatic ipc bx-21aOct 13, 2026
CVE-2023-6451
30Monitor
Publicly Known Cryptographic Machine Key In Procura Portal Application
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
alayacare · procuraFeb 16, 2024
CVE-2026-107177
29Monitor
Express Gateway through 1.16.11 Hardcoded Default cipherKey Exposes OAuth Tokens
HighCVSS 7.4No exploitEPSS 0%
expressgateway · express-gatewayOct 7, 2026
CVE-2026-111367
27Monitor
BillionMail through 4.9 Forgeable JWTs via Default Signing Key
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
aapanel · billionmailOct 15, 2026
CVE-2026-54887
25Monitor
DTLS server cookie bypass during startup window due to empty initial cookie secret
MediumCVSS 6.3No exploitEPSS 0%
- Pre-auth
erlang · erlang/otpJul 2, 2026
CVE-2026-5039
24Monitor
Predictable Default Cryptographic Key Used for DES Encryption in TP-Link TL-WL841N
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
tp-link · tl-wr841n firmwareApr 23, 2026
CVE-2026-20709
23Monitor
Use of Default Cryptographic Key in the hardware for some Intel(R) Pentium(R) Processor Silver Series, Intel(R) Celeron(R) Processor J Serie
MediumCVSS 5.8No exploitEPSS 0%
Apr 8, 2026
CVE-2025-1688
22Monitor
System configuration password reset
MediumCVSS 5.5No exploitEPSS 0%
milestone systems · xprotect vmsApr 15, 2025
CVE-2026-92777
21Monitor
A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass d
MediumCVSS 5.4No exploitEPSS 0%
- RCE
lenovo · idea tab pro (tb373fu)Oct 16, 2026
CVE-2025-26849
17Monitor
There is a Hard-coded Cryptographic Key in Docusnap 13.0.1440.24261, and earlier and later versions.
MediumCVSS 4.3No exploitEPSS 0%
docusnap · docusnapMar 4, 2025
CVE-2026-25815
12Monitor
Fortinet FortiOS through 7.6.6 allows attackers to decrypt LDAP credentials stored in device configuration files, as exploited in the wild f
LowCVSS 3.2No exploitEPSS 0%
fortinet · fortiosFeb 5, 2026
CVE-2026-2215
11Monitor
rachelos WeRSS we-mp-rss JWT auth.py default key
LowCVSS 2.9No exploitEPSS 0%
- Pre-auth
rachelos · werss we-mp-rssFeb 9, 2026
CVE-2024-11619
9Monitor
macrozheng mall JWT Token default key
LowCVSS 2.3No exploitEPSS 0%
- Pre-auth
macrozheng · mallNov 22, 2024

All vulnerability classes