CVE-2022-37857: Hauk Project Hauk

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

bilde2910 Hauk v1.6.1 requires a hardcoded password which by default is blank. This hardcoded password is hashed but stored within the config.php file server-side as well as in clear-text on the android client device by default.

Affected products

• Hauk Project Hauk: version 1.6.1 only

Published 2022-09-08. Last modified 2026-06-17.