CWE-214

CVEs per yearBy the year they were published

1. 20182
2. 20191
3. 20202
4. 20211
5. 20221
6. 20245
7. 20255
8. 202625

Newest CVEs

• CVE-2026-121745

  nvm exposes NVM_AUTH_HEADER to other local users on the curl/wget command line

  nvm-sh · nvm

  Low2.0
• CVE-2026-116246

  pgAdmin 4: Server passwords are left in pgAdmin's process environment

  pgadmin.org · pgAdmin 4

  High7.0
• CVE-2026-119117

  Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java

  AWS · amazon-kinesis-producer

  High8.2
• CVE-2026-92171

  Infinispan-operator: infinispan operator: sensitive information disclosure due pod args store

  Red Hat · Red Hat Data Grid 8

  Medium6.5
• CVE-2026-113496

  Cockpit-machines: cockpit-appstream: vnc console password disclosure through virt-xml command-line arguments

  Red Hat · Red Hat Enterprise Linux 10

  Medium5.0
• CVE-2026-113495

  Cockpit-machines: cockpit-appstream: rhsm access-token disclosure through image helper command-line arguments

  Red Hat · Red Hat Enterprise Linux 10

  Medium5.0
• CVE-2026-109971

  Clevis: clevis: pkcs#11 token pin exposed on command line via pkcs11-tool

  Red Hat · Red Hat Enterprise Linux 10

  Medium4.7
• CVE-2026-102371

  wsl-pro-service: Ubuntu Pro token exposed via process command-line arguments

  Canonical · Ubuntu Pro for WSL

  Medium5.7
• CVE-2026-61670

  microsandbox: Secret values exposed in world-readable process arguments

  superradcompany · microsandbox

  Medium6.5
• CVE-2026-92768

  Cockpit-machines: cockpit-machines: sensitive data exposure via command-line arguments

  Red Hat · Red Hat Enterprise Linux 10

  Medium5.5

Vendors it comes up for most

1. Red Hat10
2. Canonical2
3. IBM2
4. jahlives2
5. AWS1
6. Arctera1
7. Axis Communications AB1
8. BMC1
9. Black Duck1
10. Checkmk GmbH1