CVE-2026-18452 – Rich Source｜DMS+ (Non-Mobile) – Use of Hard-coded Credentials

CVE ID :CVE-2026-18452

Published : July 31, 2026, 7:16 a.m. | 30 minutes ago

Description :DMS+ (Non-Mobile) developed by Rich Source has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can exploit a fixed API key to gain control over all installed DMS+ devices.

Severity: 10.0 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…