CWE-321 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-321 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 실제 악용이 확인됨CVE-2025-30406Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vuln…94.3%심각9.8● 실제 악용이 확인됨CVE-2016-4437Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, …93.0%심각9.8CVE-2026-86708ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to exposure of …1.2%심각10.0CVE-2026-110612vlife through 2.0.1 contains an authentication bypass vulnerability that allows unauthenticated atta…1.0%심각9.3CVE-2026-75431PowerJob Server version 5.1.2 (and likely earlier) uses a predictable JWT signing key for HS256-base…0.8%심각9.1CVE-2026-116747Kener 3.0.0 before 4.1.10 contains an authentication bypass vulnerability that allows unauthenticate…0.6%심각9.2CVE-2026-117564nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated …0.6%심각9.3CVE-2026-111692DataBuff ai-apm-web through 0.1.10 contains an authentication bypass vulnerability that allows unaut…0.6%심각9.3
전체 목록
90건
CVE-2026-52727lxc-ci contains continuous integration and image-build scripts for LXC. Prior to the 2026-05-28 Arch Linux ima…0.6%높음7.2
CVE-2026-120209AJ-Report through 1.7.1 signs share tokens with a hard-coded JWT secret, allowing attackers to forge valid Sha…0.5%심각9.3
CVE-2026-28326SolarWinds Access Rights Manager was reported to be affected by an unauthenticated remote code execution vulne…0.5%높음8.8
CVE-2026-90945Crawlab through 0.6.3 uses a hard-coded HMAC-SHA256 secret for JWT token signing that cannot be overridden via…0.5%심각9.3
CVE-2026-61737ng-antd-admin is an Angular and NestJS administration system template. Prior to 22.0, a hardcoded default `JWT…0.5%심각9.8
CVE-2026-89026The Issabel Framework, the web framework supporting Issabel PBX software, before commit b97dbaf contains a har…0.5%심각9.3
CVE-2026-82891IBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due …0.5%높음8.1
CVE-2014-125135A security vulnerability has been detected in OctoPrint 1.0.0/1.1.0. Affected is an unknown function of the co…0.5%보통6.9
CVE-2026-81855A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework compon…0.5%심각9.3
CVE-2026-86384Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0…0.5%심각9.8
CVE-2026-111612netdisk-fast-download through 0.4.8 contains an information disclosure vulnerability that allows unauthenticat…0.5%높음8.7
CVE-2026-108860BotSharp through 5.2.0 contains an authentication bypass vulnerability that allows unauthenticated remote atta…0.5%심각9.3
CVE-2026-86241A weakness has been identified in liufee FeehiCMS up to 2.1.1. This impacts an unknown function of the file en…0.5%낮음2.1
CVE-2026-110214Snowy 3.6.5 contains a hard-coded HMAC key vulnerability that allows unauthenticated attackers to forge downlo…0.5%보통6.3
CVE-2026-53709MCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.py and .env…0.5%심각9.8
CVE-2026-111690Simple Admin Core through 1.8.7 contains an authentication bypass vulnerability that allows unauthenticated at…0.4%심각9.3
CVE-2026-78225A hardcoded cryptographic server key vulnerability exists in the deployer-ng Update Controller component of Wä…0.4%심각9.5
CVE-2026-100413SeaweedFS is a distributed storage system for files and blobs. From 4.0.388 until 4.41, the SFTP Helm chart em…0.4%높음7.0
CVE-2026-111636OpenBMB StaffDeck through 0.5.6 contains an authentication bypass vulnerability that allows unauthenticated at…0.4%심각9.2
CVE-2026-103055AiSOC versions 7.5.0 before 12.0.0 use a hard-coded constant for JWT verification in the realtime WebSocket an…0.4%높음8.7
CVE-2026-81478Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Cryptographic K…0.4%높음8.1
CVE-2026-119597OpenDeepWiki through 2.0.6 contains a hard-coded JWT signing key vulnerability that allows unauthenticated att…0.4%심각9.3
CVE-2026-110474This vulnerability exists in the CreditNirvana Agentic AI Call Centre application due to hardcoded static API …0.4%높음8.7
CVE-2026-111347go-ldap-admin through 0.6.2 embeds a hard-coded RSA private key, published in the public repository, that prot…0.4%높음8.2
CVE-2026-113466A security vulnerability has been detected in MinIO up to RELEASE.2025-10-15T17-29-55Z. This issue affects the…0.4%보통5.5
CVE-2026-47097AJA HELO Plus firmware before 2.1.7 contains an information disclosure vulnerability that allows unauthenticat…0.4%높음8.7
CVE-2026-85153This vulnerability exists in the Schmooze app due to the use of hardcoded credentials and cryptographic keys i…0.4%심각9.3
CVE-2026-76298In Splunk Enterprise versions below 10.4.4 and 10.2.8, a user who does not hold the "admin" or "power" Splunk …0.4%높음8.8
CVE-2026-111642FastapiAdmin through 3.0 contains a hard-coded JWT signing secret in backend/app/config/setting.py that allows…0.4%높음8.7
CVE-2026-111633ZKEACMS through 4.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to f…0.3%높음8.8
CVE-2026-78481Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00,…0.3%보통6.5
CVE-2026-85963Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 include deprecated OpsDi…0.3%높음7.5
CVE-2026-111460A hard-coded cryptographic key vulnerability exists in the OnCell G3150A-LTE Series. Under certain conditions,…0.3%높음7.7
CVE-2026-111696data-platform-open through commit efeacd3 uses a hardcoded, publicly known default AES key in AesPasswordEncAn…0.3%높음7.1
CVE-2026-90510A security vulnerability has been detected in dromara orion-visor up to 2.5.7. This affects the function HostK…0.3%보통5.5
CVE-2026-87929MaxSite CMS through 109.6 ships with a hardcoded session encryption key in application/config/config.php that …0.3%심각9.3
CVE-2026-71449: Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32 allows : Retrieve Embedded…0.3%심각9.3
CVE-2026-105392A vulnerability has been found in Lybbn Django-Vue-Lyadmin up to 3.2.12. The impacted element is an unknown fu…0.3%보통5.5
CVE-2026-108798A vulnerability was found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This issue affects some unknown process…0.3%보통6.9
CVE-2026-82827Hitachi Coding Software Suite contains a vulnerability related to Use of Hard-coded Cryptographic Key. The Har…0.3%심각9.3
CVE-2025-62841An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and …0.2%높음8.7
CVE-2025-62839An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and …0.2%높음8.7
CVE-2026-112345TTLock Android application before v9.8.260718 and associated smart-lock firmware contain a hardcoded static AE…0.2%높음8.6
CVE-2026-89052A hardcoded cryptographic key management vulnerability exists in Archer C6 due to the use of a universal crypt…0.2%보통5.9
CVE-2026-18181IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to bypass authentic…0.2%높음8.1
CVE-2026-18330A hard-coded cryptographic key vulnerability exists in the web module of TP-Link Archer AX55 v4. A LAN attacke…0.2%보통6.1
CVE-2026-106172A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox…0.2%보통5.3
CVE-2026-10764Information disclosure in BVMS 4.5 up to 12.3 including allows man-in-the-middle attackers to gain unauthorize…0.2%높음8.7
CVE-2026-82929mH-DEVELOPER smart home module uses the same hard-coded SSH host keys on every device, with no per-device key …0.2%보통6.3
CVE-2026-108336When the default self-signed certificate is used, an attacker could gain administrative access to the applicat…0.2%심각9.1
CVE-2026-102241A vulnerability was determined in Netcore NAP930 0.1.241010.141410. This vulnerability affects unknown code of…0.2%낮음2.0
CVE-2026-79735Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00,…0.2%보통4.4
CVE-2026-53939OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption (JOSE). In versions 0.6…0.2%심각9.1
CVE-2026-105035The EnergizeLab FirmwareUpdater (AArch64 ELF, distributed in the CDN bin.zip) uses a single hard-coded AES key…0.2%높음7.8
CVE-2026-78486Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00,…0.2%보통4.4
CVE-2026-65198Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy. An a…0.2%높음8.6
CVE-2026-87424A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows…0.2%높음8.6
CVE-2026-18154IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive…0.2%높음8.0
CVE-2026-75558The Botslab G980H dash camera firmware uses a hard-coded cryptographic key and initialization vector to protec…0.2%보통6.0
CVE-2026-103778Dell Command | Configure (DCC), versions prior to 5.2.3.35 contain a Use of Hard-coded Cryptographic Key vulne…0.2%보통6.2
CVE-2026-109424NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains a weak encr…0.2%높음8.2
CVE-2026-109813A hard-coded cryptographic key vulnerability exists in the `/usr/bin/sysman` of some of Moxa's industrial comp…0.2%높음8.6
CVE-2026-75553Smartphone application Tohoku Electric Power "Yorisou e Net" uses a hard-coded cryptographic key, which may al…0.1%낮음2.4
CVE-2026-80114PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.…0.1%높음8.5
CVE-2026-81326QND uses a hard-coded cryptographic key, which may allow a local attacker who is logged in to a Windows PC whe…0.1%보통6.8
CVE-2026-91912Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Use of Hard-coded Cryptographic Key vulnerabi…0.1%높음7.3
CVE-2026-112014LobsterAI before 2026.10.16 contains a hardcoded password vulnerability that allows attackers to decrypt expor…0.1%보통6.8
CVE-2026-102812A hard-coded cryptographic key vulnerability exists in the user-configuration backup mechanism of TP-Link RE30…0.1%보통6.9
CVE-2026-107171An Hardcoded Cryptographic Key vulnerability existed in Trellix Agent 5.8.4 via mfecryptc.dll leads to Databas…0.1%보통6.9
CVE-2026-81821The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards project files to decryp…0.1%높음8.3
CVE-2026-71456Use of hard-coded cryptographic key vulnerability in Johnson Controls Kantech Entrapass allows Padding Oracle …0.1%높음8.5
CVE-2026-80057Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00,…0.1%보통5.5
CVE-2026-78487Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00,…0.1%보통5.5
CVE-2026-80167Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00,…0.1%보통5.5
CVE-2026-34499Use of hard-coded cryptographic key vulnerability in Johnson Controls ADVMS allows Read Sensitive Constants Wi…0.1%높음8.5
CVE-2026-94591Armatura One stores database and message-broker credentials in an install configuration file, encrypting them …0.1%높음8.6
CVE-2026-79762Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. …0.1%보통5.5
CVE-2026-50606A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and Preda…0.1%낮음1.2
CVE-2026-50603A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorS…0.1%보통4.9
CVE-2026-93694In Progress ShareFile Storage Zones Controller v5.12.6 and below, processing of queue items can send acknowled…0.1%보통4.0
CVE-2026-92199Quest Foglight for Databases EncryptionUtil Hardcoded Encyption Key Local Privilege Escalation Vulnerability. …높음7.8
CVE-2026-82154Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Hard-coded Cryptographic Key vulnerability. A…낮음2.4
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.