CWE-321 使用硬编码的密码学密钥 类弱点 319 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-321 指软件在代码中硬编码了不可更改的加密密钥。攻击者通过逆向工程提取该密钥，即可解密受保护数据或伪造合法通信，严重破坏机密性与完整性。开发者应避免此类做法，改用动态密钥管理机制，如从安全密钥库、环境变量或硬件安全模块中运行时获取密钥，确保密钥可轮换且不与源代码一同发布。
int VerifyAdmin(char *password) { if (strcmp(password,"68af404b513073584c4b6f22b6c63e6b")) { printf("Incorrect Password!\n"); return(0); } printf("Entering Diagnostic Mode...\n"); return(1); }public boolean VerifyAdmin(String password) { if (password.equals("68af404b513073584c4b6f22b6c63e6b")) { System.out.println("Entering Diagnostic Mode..."); return true; } System.out.println("Incorrect Password!"); return false;| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-52727 | LXC-CI Arch Linux镜像私钥泄露 — lxc-ci | 7.2 | High | 2026-09-17 |
| CVE-2026-28326 | SolarWinds Access Rights Manager 未认证远程代码执行漏洞 — Access Rights Manager | 8.8 | High | 2026-09-17 |
| CVE-2026-81478 | Dell OMSA 11.1.0.3 硬编码密钥漏洞 — OpenManage Server Administrator Managed Node (Patch) for Windows | 8.1 | High | 2026-09-17 |
| CVE-2026-50606 | Acer NitroSense 软件硬编码加密密钥漏洞 — System Monitoring | 1.2 | Low | 2026-09-17 |
| CVE-2026-50603 | Acer NitroSense 硬编码密钥漏洞 — Agent Service | 4.9 | Medium | 2026-09-17 |
| CVE-2026-81326 | QND硬编码密钥致本地管理员凭据泄露 — QND Premium | 6.8 | Medium | 2026-09-16 |
| CVE-2026-81855 | Wärtsilä FOS-Onboard 硬编码密钥使用漏洞 — FOS-Onboard | 9.1 | Critical | 2026-09-15 |
| CVE-2026-78225 | Wärtsilä FOS-Onboard 硬编码密钥 — FOS-Onboard | 9.0 | Critical | 2026-09-15 |
| CVE-2026-89026 | Issabel Framework 硬编码JWT密钥远程代码执行漏洞 — Issabel Framework | 9.8 | Critical | 2026-09-15 |
| CVE-2026-90945 | Crawlab Team Crawlab 加密问题漏洞 — crawlab | 9.8 | Critical | 2026-09-14 |
| CVE-2026-90510 | Dromara orion-visor 加密问题漏洞 — orion-visor | 8.3 | High | 2026-09-13 |
| CVE-2026-87929 | MaxSite CMS 加密问题漏洞 — MaxSite CMS | 9.8 | Critical | 2026-09-09 |
| CVE-2026-79735 | Dell Secure Connect Gateway 加密问题漏洞 — Secure Connect Gateway 5.0 - Application | 4.4 | Medium | 2026-09-09 |
| CVE-2026-78486 | Dell Secure Connect Gateway 加密问题漏洞 — Secure Connect Gateway 5.0 - Application | 4.4 | Medium | 2026-09-09 |
| CVE-2026-78481 | Dell Secure Connect Gateway 加密问题漏洞 — Secure Connect Gateway 5.0 - Application | 6.5 | Medium | 2026-09-09 |
| CVE-2026-53939 | OpenIDC cjose 加密问题漏洞 — cjose | 9.1 | Critical | 2026-09-08 |
| CVE-2026-81821 | AVEVA Pipeline Integrity Monitor 加密问题漏洞 — Pipeline Integrity Monitor | 8.4 | High | 2026-09-08 |
| CVE-2026-80167 | Dell Secure Connect Gateway 加密问题漏洞 — Secure Connect Gateway 5.0 - Application | 5.5 | Medium | 2026-09-07 |
| CVE-2026-80057 | Dell Secure Connect Gateway 加密问题漏洞 — Secure Connect Gateway 5.0 - Application | 5.5 | Medium | 2026-09-07 |
| CVE-2026-78487 | Dell Secure Connect Gateway 加密问题漏洞 — Secure Connect Gateway 5.0 - Application | 5.5 | Medium | 2026-09-07 |
| CVE-2026-86241 | Liufee FeehiCMS 加密问题漏洞 — FeehiCMS | 4.3 | Medium | 2026-09-07 |
| CVE-2026-80114 | PassMark Software PerformanceTest 加密问题漏洞 — PerformanceTest | 7.8 | High | 2026-09-04 |
| CVE-2026-18330 | TP-Link Archer AX55 v4 加密问题漏洞 — Archer AX55 v4 | 6.1 | Medium | 2026-09-03 |
| CVE-2026-84483 | WWBN AVideo 加密问题漏洞 — AVideo | 5.3 | Medium | 2026-09-01 |
| CVE-2026-74233 | Zbtlink WE1326 加密问题漏洞 — WE1326 | 9.8 | Critical | 2026-08-27 |
| CVE-2026-24166 | NVIDIA Unified Fabric Manager Enterprise - GA 加密问题漏洞 — Unified Fabric Manager Enterprise - GA | 5.1 | Medium | 2026-08-25 |
| CVE-2026-15469 | TP-Link deco 加密问题漏洞 — Deco XE75 v3 / XE5300 v3.6/ WE10800 v3.6 | 7.7 | High | 2026-08-24 |
| CVE-2026-76258 | Splunk Enterprise 加密问题漏洞 — Splunk Enterprise | 6.5 | Medium | 2026-08-19 |
| CVE-2026-64887 | Johnson Controls Airwall 加密问题漏洞 — Airwall | 7.0 | High | 2026-08-14 |
| CVE-2026-17468 | IBM Documentation Offline 加密问题漏洞 — Documentation Offline | 5.3 | Medium | 2026-08-13 |
CWE-321（使用硬编码的密码学密钥） 是常见的弱点类别，本平台收录该类弱点关联的 319 条 CVE 漏洞。