CWE-1391

CVEs per yearBy the year they were published

1. 20234
2. 202416
3. 202518
4. 202627

Newest CVEs

• CVE-2026-114616

  Authlib accepts an empty HMAC key, allowing JWS/JWT signature forgery (HS256/HS384/HS512)

  authlib · authlib

  High7.4
• CVE-2026-113735

  D-Link DCS-6501LH aoni_ipc mydlink_set_root_pwd weak credentials

  D-Link · DCS-6501LH

  Medium6.3
• CVE-2026-107153

  Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot (AVB) functionality. With physical access to the…

  Rakuten Mobile, Inc. · Rakuten Mini

  High7.0
• CVE-2026-109321

  Grav Login OAuth Plugin before 1.4.3 Predictable Local Credentials Authentication Bypass

  getgrav · grav-plugin-login-oauth

  Critical9.3
• CVE-2026-107828

  Jivejdon through 5.0 Predictable Passwords via Sina Weibo OAuth Login

  banq · jivejdon

  Medium6.9
• CVE-2026-100299

  Use of Weak Credentials in Anjvision YSSD-RTMP-H5

  Anjvision · YSSD-RTMP-H5

  High7.0
• CVE-2026-22094

  Weak root password in EVbee DC 80

  EVbee · DC 80

  Critical9.3
• CVE-2026-88761

  Botslab G980H Dashcams Use of Weak Credentials

  Botslab · G980H

  Medium6.0
• CVE-2026-46623

  OpenAM Account Takeover via Unverified Password Change in OAuth2 Module

  OpenIdentityPlatform · OpenAM

  High7.4
• CVE-2026-79679

  Use of Weak Credentials

  B&R Industrial Automation GmbH · mapp Services

  High7.0

Vendors it comes up for most

1. SICK AG3
2. ECOVACS ROBOTICS2
3. KDDI CORPORATION2
4. authlib2
5. ABB Ltd.1
6. Anjvision1
7. B&R Industrial Automation GmbH1
8. Bharti Airtel1
9. Botslab1
10. BridgeHead Software1