CWE-311

530 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.

Critical 29High 274Medium 200Low 27Not scored 0

CVEs per yearBy the year they were published

CVE-2026-34486
Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor
Apache Software Foundation · Apache Tomcat
ExploitedHigh7.5

CVE-2026-5345
HCL AION is affected by multiple security vulnerabilities.
HCL Software · HCL AION
Low3.7
CVE-2026-21849
HCL AION is affected by multiple security vulnerabilities.
HCL Software · HCL AION
Low3.7
CVE-2026-35110
HCL AION is affected by multiple security vulnerabilities.
HCL Software · HCL AION
Medium5.4
CVE-2026-116198
Snipe-IT before 8.7.0 Missing Encryption via Api AssetsController store
grokability · snipe-it
Medium5.3
CVE-2026-115247
subhajitkhan online-clinic-management-system patientregistration.php missing encryption
subhajitkhan · online-clinic-management-system
Medium5.3
CVE-2026-43854
A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabled devices.
Advantech · ADAM-3600
Medium6.3
CVE-2026-111063
AIOHTTP: Secure attribute not enforced for shared cookie
aio-libs · aiohttp
Medium6.3
CVE-2026-86375
Dell Application Installer, versions prior to 26.09.0.1, contain a Missing Encryption of Sensitive Data vulnerability. An unauthenticated attacker with local…
Dell · Application Installer,
Medium6.2
CVE-2026-105179
SourceCodester Drug Recommendation System Password add_user.php missing encryption
SourceCodester · Drug Recommendation System
Medium5.1
CVE-2026-78860
An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the storage of information in plaintext
Product not named
High7.8