Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2026-18452

Rich Source|DMS+ (Non-Mobile) - Use of Hard-coded Credentials

Description

DMS+ (Non-Mobile) developed by Rich Source has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can exploit a fixed API key to gain control over all installed DMS+ devices.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Rich Source DMS+ (Non-Mobile)

Default version status: unaffected

  • 0 to ≤ 5.63affected

References