Rich Source vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Rich Source products: 1 record(s), with severity, exploitation and fixes.

DMS+ (Non-Mobile) 1

Exploited only (KEV) →

CVE-2026-18452 Critical · 10.0 CWE-798 Jul 31, 2026

Rich Source｜DMS+ (Non-Mobile) - Use of Hard-coded Credentials

DMS+ (Non-Mobile) developed by Rich Source has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can exploit a fixed API key to gain control over all installed DMS+ devices.