CWE-547

CVEs per yearBy the year they were published

1. 20201
2. 20231
3. 20243
4. 20255
5. 20262

Newest CVEs

• CVE-2026-59105

  Universal sysadmin credential vulnerability in Jumis

  Jumis Pro SIA · Jumis

  Critical9.3
• CVE-2026-28256

  Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge

  Trane · Tracer SC

  Medium6.9
• CVE-2025-49151

  Use of Hard-coded, Security-relevant Constants in MICROSENS NMP Web+

  Microsens · NMP Web+

  Critical9.3
• CVE-2025-23253

  NVIDIA NvContainer service for Windows contains a vulnerability in its usage of OpenSSL, where an attacker could exploit a hard-coded constant issue by copying…

  NVIDIA · NVIDIA App

  Low2.5
• CVE-2025-30206

  Dpanel's hard-coded JWT secret leads to remote code execution

  donknap · dpanel

  Critical9.8
• CVE-2025-2081

  Use of Hard-Coded, Security-Relevant Constants

  Optigo Networks · Visual BACnet Capture Tool

  High8.7
• CVE-2025-2079

  Use of Hard-Coded, Security-Relevant Constants in Optigo Networks Visual BACnet Capture Tool / Optigo Visual Networks Capture Tool

  Optigo Networks · Visual BACnet Capture Tool

  High8.7
• CVE-2024-41885

  Hardcoding sensitive information

  Hanwha Vision Co., Ltd. · XRN-420S

  Medium5.6
• CVE-2024-39888

  A vulnerability has been identified in Mendix Encryption (All versions >= V10.0.0 < V10.0.2). Affected versions of the module define a specific hard-coded…

  Siemens · Mendix Encryption

  High8.7
• CVE-2024-32021

  Local Git clone may hardlink arbitrary user-readable files into the new repository's "objects/" directory

  git · git

  Low3.9

Vendors it comes up for most

1. Optigo Networks2
2. Hanwha Vision Co., Ltd.1
3. Jumis Pro SIA1
4. Microsens1
5. NVIDIA1
6. Red Hat1
7. Siemens1
8. Trane1
9. deepset-ai1
10. donknap1