Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

CWE-1428

5 published CVEs are weaknesses of this kind, as the records or NVD name it.

All 5 in the listAtom feed of new CVEsWhat CWE-1428 is, at MITRE (opens in a new tab)
Published CVEs
5
Last 12 months
5
Critical
0
Known exploited
0

Critical 0High 3Medium 1Low 1Not scored 0

Newest CVEs

  • CVE-2026-120422

    Insecure HTTP configuration retrieval in Sogou Input Method allows arbitrary code execution

    Sogou · Sogou Input Method

    High8.9
  • CVE-2026-110970

    Lack of traffic encryption in Płatnik

    Zakład Ubezpieczeń Społecznych · Płatnik

    Low2.3
  • CVE-2026-82933

    Cleartext Transmission of Sensitive Information in mH-DEVELOPER

    F&F Filipowski · mH-DEVELOPER

    Medium6.0
  • CVE-2026-10763

    PROMOD V is using insecure HTTP communication instead of HTTPS. The vulnerability is due to the lack of HTTPS support from 3rd party Digipede server.

    Hitachi Energy · PROMOD V

    High7.0
  • CVE-2026-40677

    The use of insecure HTTP transport within AMD optional tools could allow an attacker to conduct a man-in-the-middle attack, potentially leading to arbitrary…

    AMD · AMD Management Console (AMC)

    High7.7

Vendors it comes up for most

  1. AMD1
  2. F&F Filipowski1
  3. Hitachi Energy1
  4. Sogou1
  5. Zakład Ubezpieczeń Społecznych1