CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-18452 — DMS+ (Non-Mobile) developed by Rich Source has a Use of Hard-coded Credentials v...

·Source: NIST NVD

Updated:

Executive Summary

DMS+ (Non-Mobile) developed by Rich Source has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can exploit a fixed API key to gain control over all installed DMS+ devices.

Analysis

DMS+ (Non-Mobile) developed by Rich Source has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can exploit a fixed API key to gain control over all installed DMS+ devices. CVSS Score: 10. Published: 2026-07-31T07:16:27.400.

Indicators of Compromise (1)

CVE (1)
CVE-2026-18452
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Jul 31, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

Circle granted New York trust charter

Circle Internet Group, Inc. (NYSE: CRCL), a global financial technology company and stablecoin market leader, today announced that it has received a limited purpose trust charter from the New York Department of Financial Services (NYDFS) for Circle Internet Trust Company LLC, d/b/a Circle New York Trust.

Finextra
MEDIUMVulnerability

Health-ISAC Warns of Increasing ShinyHunters Healthcare Data Theft Attacks

Health sector organizations have been warned about an increase in successful attacks by the ShinyHunters threat group. In contrast to […] The post Health-ISAC Warns of Increasing ShinyHunters Healthcare Data Theft Attacks appeared first on The HIPAA Journal .

HIPAA Journal
MEDIUMVulnerability

New York sues Kalshi for 'illegal gambling operation'

New York state has sued Kalshi, alleging that the prediction market is running an "illegal gambling operation".

Finextra