CWE-255

783 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.

Critical 69High 291Medium 317Low 106Not scored 0

CVEs per yearBy the year they were published

CVE-2014-1812
The Group Policy implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server…
Product not named
ExploitedHigh8.8

CVE-2026-97877
zhistaredu StarTraining JWT Token application.yml UserLoginService.createToken hard-coded password
zhistaredu · StarTraining
Medium6.9
CVE-2026-19750
Tenda CH/CP/TX3 SSH hard-coded password
Tenda · CH
Critical9.2
CVE-2026-11552
SourceCodester Onlne Examination & Learning Management System import_users.php hard-coded password
SourceCodester · Onlne Examination & Learning Management System
Medium6.9
CVE-2026-11515
SourceCodester Barangay Resident Profiling and Information Management System Password Reset passsword_reset.php hard-coded password
SourceCodester · Barangay Resident Profiling and Information Management System
Medium6.9
CVE-2026-6597
langflow-ai langflow Flow Using API core.py has_api_terms credentials storage
langflow-ai · langflow
Medium5.1
CVE-2026-4251
CityData CityChat ai.citydata.citychat credentials.json credentials storage
CityData · CityChat
Low2.0
CVE-2026-4250
Albert Sağlık Hizmetleri ve Ticaret Albert Health Google Cloud Service Account Key service-account.json credentials storage
Albert Sağlık Hizmetleri ve Ticaret · Albert Health
Low2.0
CVE-2026-4243
La Nacion App app.lanacion.activity BuildConfig.java credentials storage
La Nacion App
Low2.0
CVE-2026-4242
BabyChakra Pregnancy & Parenting App app.babychakra.babychakra Configuration.java credentials storage
BabyChakra · Pregnancy & Parenting App
Low2.0
CVE-2026-4217
XREAL Nebula App ai.nreal.nebula.universal CloudStoragePlugin.java credentials storage
XREAL · Nebula App
Low2.0