CWE-1391
66 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 66Published CVEs66 of them scored
- 28Last 12 monthspublished in the last year
- 16Critical30 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-59105
Universal sysadmin credential vulnerability in Jumis
Jumis Pro SIA · Jumis
Critical9.3 - CVE-2026-114616
Authlib accepts an empty HMAC key, allowing JWS/JWT signature forgery (HS256/HS384/HS512)
authlib · authlib
High7.4 - CVE-2026-113735
D-Link DCS-6501LH aoni_ipc mydlink_set_root_pwd weak credentials
D-Link · DCS-6501LH
Medium6.3 - CVE-2026-107153
Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot (AVB) functionality. With physical access to the…
Rakuten Mobile, Inc. · Rakuten Mini
High7.0 - CVE-2026-109321
Grav Login OAuth Plugin before 1.4.3 Predictable Local Credentials Authentication Bypass
getgrav · grav-plugin-login-oauth
Critical9.3 - CVE-2026-107828
Jivejdon through 5.0 Predictable Passwords via Sina Weibo OAuth Login
banq · jivejdon
Medium6.9 - CVE-2026-100299
Use of Weak Credentials in Anjvision YSSD-RTMP-H5
Anjvision · YSSD-RTMP-H5
High7.0 - CVE-2026-22094
Weak root password in EVbee DC 80
EVbee · DC 80
Critical9.3 - CVE-2026-88761
Botslab G980H Dashcams Use of Weak Credentials
Botslab · G980H
Medium6.0 - CVE-2026-46623
OpenAM Account Takeover via Unverified Password Change in OAuth2 Module
OpenIdentityPlatform · OpenAM
High7.4