CWE-319: Cleartext transmission of sensitive information

CVEs per yearBy the year they were published

1. 20121
2. 20151
3. 201728
4. 201848
5. 2019103
6. 2020110
7. 202192
8. 202294
9. 2023104
10. 202494
11. 2025114
12. 2026183

Newest CVEs

• CVE-2026-123497

  Vikunja veans before 2.7.1 HTTPS to HTTP Downgrade in Server Discovery

  go-vikunja · vikunja

  High7.6
• CVE-2026-54373

  VitaFit Android < 2.8.1.0 Cleartext Traffic via Missing Network Security Config

  Shenzhen Shine Industrial Co., Ltd. · VitaFit

  Medium5.1
• CVE-2026-120734

  Cleartext transmission of sensitive information in the email configuration test in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with…

  Devolutions · Server

  Medium6.5
• CVE-2026-118373

  LibreSSL ocspcheck through 4.4.0 Cleartext Transmission of OCSP Requests via url2host()

  OpenBSD · LibreSSL

  Medium6.3
• CVE-2026-115495

  Mobile VPN with SSL Client for Windows: Cleartext Transmission of VPN Credentials over Local Management Socket

  WatchGuard · Mobile VPN with SSL Client

  Medium5.7
• CVE-2026-116844

  Fclairamb ftpserverlib through 0.32.4 Cleartext FTPES Data Transfer via PROT P

  fclairamb · ftpserverlib

  Medium6.3
• CVE-2026-70379

  Unauthorized Access to vSolution Matrix RTSP

  WolfVision · Cynap Pro, Cynap Core Pro

  High7.1
• CVE-2026-116114

  Yoosee GM8135S Camera Live UDP H.264 Video Stream npc cleartext transmission

  Yoosee · GM8135S Camera

  Medium6.3
• CVE-2026-116105

  HeyCyan App Network Security Configuration AndroidManifest.xml cleartext transmission

  HeyCyan App

  Medium6.3
• CVE-2026-116200

  Snipe-IT before 8.6.3 LDAP StartTLS Downgrade via connectToLdap()

  grokability · snipe-it

  High8.2

Vendors it comes up for most

1. IBM73
2. Jenkins project31
3. Red Hat10
4. Siemens10
5. Apache Software Foundation9
6. HCL Software9
7. Microsoft9
8. Synology9
9. Lenovo8
10. Moxa8