Skip to content
OpenAdvisories

Weakness (CWE)

CWE-321: Use of Hard-coded Cryptographic Key

Variant Draft

The product uses a hard-coded, unchangeable cryptographic key.

How to prevent it (1 mitigation)

  1. Architecture and Design

    Prevention schemes mirror that of hard-coded password storage.

Source: MITRE CWE-321

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.5
    CVE-2026-39031 Public exploit

    Lansweeper lsrunase 2.0 and lsencrypt 2.0 use RC4 encryption with a hardcoded 142-byte static key array to encrypt cred…

  • Medium 5.1
    CVE-2025-56801 Public exploit

    The Reolink Desktop Application 8.18.12 contains hardcoded credentials as the Initialization Vector (IV) in its AES-CFB…

  • Medium 5.1
    CVE-2025-56802 Public exploit

    The Reolink desktop application uses a hard-coded and predictable AES encryption key to encrypt user configuration file…