CWE-759

23 published CVEs are weaknesses of this kind, as the records or NVD name it.

Newest CVEs

CVE-2026-13576
CallBackery versions before 0.62.0 for Perl store user passwords as unsalted HMAC-SHA1 hashes
CallBackery
High7.5
CVE-2026-96552
sfturing hosp_order User Password MD5.java MD5.getMD5 hash without salt
sfturing · hosp_order
Low2.3
CVE-2026-6217
Information Disclosure in Pik Online Software's Portal
Pik Online Software Solutions Inc. · Pik Online Portal
Medium6.3
CVE-2025-36271
IBM Integrated Analytics System (IIAS) is affected by a predictable salt vulnerability in Magneto component
IBM · Integrated Analytics System
Medium5.9
CVE-2026-57263
A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9). The project password feature in the affected products stores the password as an…
Siemens · LOGO! Soft Comfort
High7.0
CVE-2025-15631
Weak Credential Storage in TP-Link Omada Devices
TP-Link Systems Inc. · Omada Gateways
Medium5.7
CVE-2025-15544
Weak Credential Protection During TP-Link Omada Device Adoption
TP-Link Systems Inc. · Omada Gateways
Medium6.9
CVE-2026-45787
electerm's encrypt method not safe enough
electerm · electerm
Medium6.0
CVE-2026-45027
WeGIA: Use of Weak Password Hashing Algorithm (SHA-256, no salt) in html/login.php
LabRedesCefetRJ · WeGIA
Medium5.9
CVE-2026-9370
ulisesbocchio jasypt-spring-boot Password Hash SimpleGCMConfig.java getSecretKeySaltGenerator hash predictable salt
ulisesbocchio · jasypt-spring-boot
Medium6.3