Alpine iLX-F511 zero-day exposes hard-coded SSH credentials for code execution
Network-adjacent attackers need no login; ZDI rates ZDI-26-819 at CVSS 6.3 after a Pwn2Own finding.
Stories per day · 30 days
7 stories, newest first · one card per story
Stories tagged #hard-coded-credentials
Guangzhou Juan IoT Technology EseeCloud
Unpatched EseeCloud flaws, including hard-coded credentials, could let attackers take over IP cameras.
Johnson Controls EasyIO FG
CISA says end-of-life Johnson Controls EasyIO FG firmware has hard-coded credential flaws and will not be patched.
5
NVIDIA Infrastructure Controller Hit by 14 Flaws Enabling Code Execution and Privilege Escalation
NVIDIA patches 14 vulnerabilities in its Infrastructure Controller, including a critical CVSS 9.8 hard-coded credentials flaw enabling unauthenticated remote privilege escalation.
1
Digital Watchdog VMAX DVR and NVR Product Lineups
CISA advisory details six flaws, aggregate CVSS 9.6, giving attackers full control of Digital Watchdog VMAX DVR/NVR surveillance devices.
2
[0day-rubbish] Jitterbit Agent 12.8.1.6 (Docker jitterbit/agent:12.8.1.6) Unauthenticated SOAP with hard-coded credentials leading to OS command execution (9.8)
Jitterbit Agent 12.8.1.6's Docker image exposes unauthenticated SOAP with hard-coded credentials, leading to OS command execution (CVSS 9.8).
CareCam Pro IP Cameras
CISA advisory details hard-coded bootloader credential CVE-2026-85083 in ANJIA AJL33PC0801 CareCam Pro cameras, allowing physical-access firmware compromise.