Skip to content
CVE Tracker

CWE-320

99 published CVEs are weaknesses of this kind, as the records or NVD name it.

All 99 in the listAtom feed of new CVEsWhat CWE-320 is, at MITRE (opens in a new tab)
Published CVEs
99
Last 12 months
42
Critical
7
Known exploited
0

Critical 7High 17Medium 63Low 12Not scored 0

CVEs per yearBy the year they were published

  1. 201813
  2. 20181
  3. 20195
  4. 20199
  5. 20194
  6. 20201
  7. 20211
  8. 20232
  9. 202519
  10. 20253
  11. 202632
  12. 20262

Newest CVEs

  • CVE-2014-125135

    OctoPrint Flask Secret Key hard-coded key

    OctoPrint

    Medium6.9
  • CVE-2026-113466

    MinIO Embedded Console common-main.go SessionTokenAuthenticate hard-coded key

    MinIO

    Medium6.9
  • CVE-2026-108798

    ZKTeco BioTime hard-coded key

    ZKTeco · BioTime

    Medium6.9
  • CVE-2026-105392

    Lybbn Django-Vue-Lyadmin JWT Signing settings.py hard-coded key

    Lybbn · Django-Vue-Lyadmin

    Medium6.9
  • CVE-2026-102241

    Netcore NAP930 Backup/Restore backup_common.sh hard-coded key

    Netcore · NAP930

    Medium5.1
  • CVE-2026-90510

    dromara orion-visor HostKeyServiceImpl.java HostKeyServiceImpl.encryptKey hard-coded key

    dromara · orion-visor

    Medium6.9
  • CVE-2026-86241

    liufee FeehiCMS Cookie Validation main-local.php hard-coded key

    liufee · FeehiCMS

    Medium5.3
  • CVE-2026-56254

    capacitor-updater - End-to-End Encryption Bypass via Private Key Distribution

    capacitor-updater · capacitor-updater

    High8.3
  • CVE-2026-11505

    GL.iNet XE3000 glnassys hard-coded key

    GL.iNet · A1300

    Low2.3
  • CVE-2026-8739

    Sanluan PublicCMS SafeConfigComponent.java getSignKey hard-coded key

    Sanluan · PublicCMS

    Medium6.9

Vendors it comes up for most

  1. Qualcomm, Inc.6
  2. Cisco3
  3. Tenda2
  4. liangliangyy2
  5. AMD1
  6. Align Technology1
  7. DJI1
  8. Datavane1
  9. Enter Software1
  10. Fortinet1