CWE-321
427 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 2 of them as exploited in the wild.
- Published CVEs
- 427
- Last 12 months
- 215
- Critical
- 104
- Known exploited
- 2
Critical 104High 147Medium 150Low 25Not scored 1
CVEs per yearBy the year they were published
- 20152
- 20161
- 20174
- 20185
- 20196
- 202013
- 202113
- 202223
- 202332
- 202438
- 202594
- 2026196
Known exploitedNewest addition to KEV first
- CVE-2025-30406
Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the CentreStack portal's hardcoded…
Gladinet · CentreStack
ExploitedCritical9.0 - CVE-2016-4437
Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass…
Product not named
ExploitedCritical9.8
Newest CVEs
- CVE-2026-17356
Multiple Vulnerabilities in IBM API Connect
IBM · API Connect
High8.7 - CVE-2026-17310
Multiple Vulnerabilities in IBM API Connect
IBM · API Connect
Medium6.5 - CVE-2026-115739
Hard-coded Cryptographic Key vulnerability exists in the DLP on-prem extensions version 11.13.1 and earlier allows a remote attacker to decrypt credentials and…
Trellix · DLP on-prem extensions
Medium6.0 - CVE-2026-105330
Apache OFBiz: Use of Hard-coded Cryptographic Key in JWT Token Authentication Enables Unauthenticated Administrative Access
Apache Software Foundation · Apache OFBiz
Not scored - CVE-2026-92199
Quest Foglight for Databases EncryptionUtil Hardcoded Encyption Key Local Privilege Escalation Vulnerability
Quest · Foglight for Databases
High7.8 - CVE-2026-82154
Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with physical access…
Dell · OS Recovery tool
Low2.4 - CVE-2026-120209
AJ-Report through 1.7.1 Authentication Bypass leading to RCE via Share-Token
anji-plus · AJ-Report
Critical9.3 - CVE-2026-61737
ng-antd-admin: Hardcoded JWT Secret allows Authentication Bypass in ng-antd-admin
huajian123 · ng-antd-admin
Critical9.8 - CVE-2026-91912
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Use of Hard-coded Cryptographic Key vulnerability. A low privileged attacker with local access…
Dell · OpenManage Enterprise
High7.3 - CVE-2026-119597
OpenDeepWiki through 2.0.6 Hard-coded JWT Signing Key Admin Token Forgery
AIDotNet · OpenDeepWiki
Critical9.3