CWE-523
27 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 27Published CVEs27 of them scored
- 12Last 12 monthspublished in the last year
- 1Critical13 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-113866
Account password sent unencrypted during Exchange account setup
Mozilla · Thunderbird
Medium5.9 - CVE-2026-17620
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM · Financial Transaction Manager (FTM) for RedHat OpenShift
Medium5.3 - CVE-2026-56587
HCL IEM was affected with Strict transport security not enforced
HCLSoftware · IntelliOps Event Management
Low3.7 - CVE-2026-54784
CoreWCF: SPNEGO SecurityContextToken proof key wrapped without confidentiality
CoreWCF · CoreWCF
High7.4 - CVE-2026-8668
Hardcoded credentials in embedded content
Progress Chef · Chef360
Low2.3 - CVE-2026-36610
Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 transmits DDNS credentials over plaintext HTTP with only Base64 encoding. The firmware contains no TLS…
Product not named
Medium5.9 - CVE-2026-8673
Password re-initialization mechanism sends passwords in plain text
syslink software AG · Avantra
Medium5.9 - CVE-2026-23635
Kiteworks Secure Data Forms has a potential Unprotected Transport of Credentials
kiteworks · Secure Data Forms
Medium6.5 - CVE-2025-61916
Spinnaker vulnerable to SSRF due to improper restrictions on http from user input
spinnaker · spinnaker
High7.9 - CVE-2025-66029
Open OnDemand affected by Apache proxy passing sensitive headers
OSC · ondemand
High7.6