By weakness (CWE)

CWE-321: related vulnerabilities

CVEs classified under CWE-321. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

6 published vulnerabilities

• CVE-2026-35019HIGH 8.1

  NetComm NF20MESH routers contain a critical flaw that allows attackers to bypass login requirements and gain full administrative control of the device without knowing the real password. The vulnerability exists because the router uses the same hardcoded encryption key across all devices to protect administrative session cookies. An attacker can use this shared key to create a fake but valid login session and gain admin access to the web management interface, even while a legitimate administrator is logged in.

• CVE-2026-9220HIGH 7.5

  Setracker2, an Android companion app for managing smartwatches and wearable devices, uses the same encryption keys for all instances of the app. This means an attacker intercepting network traffic between the app and Setracker2's backend servers can decrypt and read sensitive data being transmitted. The vulnerability affects version 3.1.5 and all earlier releases. While an attacker cannot modify the data in transit (integrity is not compromised) or disrupt service, they can see what information is being communicated—potentially including user location, device data, account identifiers, or other personal information stored on or synced by the watch.

• CVE-2026-9260MEDIUM 6.2

  Canon EOS Network Setting Tool version 1.5.0 and earlier contains hard-coded cryptographic keys that are embedded directly in the application binary. An attacker with local access to an affected system can extract these keys and use them to decrypt or forge network communications intended to be protected by encryption. This is a confidentiality risk that does not require user interaction to exploit.

• CVE-2026-39031MEDIUM 5.5

  Lansweeper's credential encryption in lsrunase 2.0 and lsencrypt 2.0 relies on a weak cryptographic approach: all encrypted passwords use the same hardcoded 142-byte key derived from RC4. Because an 8-character prefix of each encrypted credential is stored unencrypted, an attacker with local system access can recover any plaintext password by performing a single SHA-1 hash and RC4 decryption—no guessing, no brute force. This is a local privilege/credential exposure issue affecting users who depend on Lansweeper for credential management on compromised or physically accessible systems.

• CVE-2026-50226MEDIUM 5.3

  The AcerConnect OTA (Over-The-Air) application contains hard-coded encryption keys that attackers can exploit to forge authentication tokens for any device. An attacker with network access can use these fixed keys to pose as legitimate devices by spoofing IMEI numbers, granting them the ability to browse firmware catalogs and download protected binary files that should remain restricted. This is a confidentiality issue—attackers gain unauthorized read access to sensitive data, but cannot currently modify or delete it through this vector.

• CVE-2026-11505MEDIUM 5.0

  GL.iNet routers across multiple models (A1300, AX1800, AXT1800, MT2500, MT3000, MT6000, X3000, XE3000) running firmware version 4.8.x contain a flaw in the glnassys component that exposes a hard-coded cryptographic key. An authenticated attacker with network access can exploit this to gain unauthorized cryptographic capabilities. The vulnerability requires significant technical skill and specific conditions to exploit, placing it in the medium-risk category. A firmware upgrade to version 4.9.0 resolves the issue.