🎯 Hardcoded credentials

The items that name it 6

• The Most Common Security Vulnerabilities in AI-Generated Code | Blog | Endor Labs
  articleas techniques2026-09-11It is written here as Hard-coded credentials (CWE-798).

  AI-generated applications produced with hard-coded secrets when prompts omit security guidance

• Secrets in AI-Generated Code: How Coding Agents Leak Credentials | Blog | Endor Labs
  articleas techniques2026-09-02It is written here as CWE-798: Use of Hard-coded Credentials.

  MITRE-tracked weakness where the product contains hard-coded credentials such as a password or cryptographic key; in the CWE Top 25 Most Dangerous Software Weaknesses every year from 2019 through 2024, rated high likelihood of exploit

• Snyk VulnBench JS 1.0: Can LLMs Find the Same Bugs Twice?
  writeupas techniques2026-06-29

  High-signal exploit shape often found cleanly by models; hardcoded database password consistently found by every model configuration in js-project-tigerteam.

• Alice and Bob Learn Secure Coding: Chapter 2
  videoas techniques2026-05-11It is written here as Hardcoded Credentials (CWE-798).

  CWE-798

• What Changed When Mobile Security Stopped Being Theoretical | Oversecured Blog
  articleas classification.key entities
• CVE-2026-85787 in postgres-mcp-server
  advisoryas techniquesIt is written here as CWE-798 (cited by the page's VulDB analysis).

  cited by the page's VulDB analysis