Skip to content
CVE Tracker

CWE-257

69 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.

All 69 in the listAtom feed of new CVEsWhat CWE-257 is, at MITRE (opens in a new tab)
Published CVEs
69
Last 12 months
17
Critical
3
Known exploited
1

Critical 3High 22Medium 38Low 6Not scored 0

CVEs per yearBy the year they were published

  1. 20171
  2. 20181
  3. 20196
  4. 20213
  5. 20211
  6. 20236
  7. 20249
  8. 202517
  9. 202513
  10. 202611
  11. 20261

Known exploitedNewest addition to KEV first

  • CVE-2026-20128

    Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability

    Cisco · Cisco Catalyst SD-WAN Manager

    ExploitedHigh7.5

Newest CVEs

  • CVE-2026-28745

    Red Lion Controls N-Tron 700 Series Storing Passwords in a Recoverable Format

    Red Lion Controls · 700 Series

    Critical9.3
  • CVE-2026-103548

    Improperly Stored Credentials

    Itron · MV-90 xi

    Medium5.3
  • CVE-2026-69297

    Windows DHCP Server Information Disclosure Vulnerability

    Microsoft · Windows 10 Version 1607

    Medium6.5
  • CVE-2026-80176

    Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Plaintext Storage of a Password…

    Dell · Secure Connect Gateway 5.0 - Application

    Medium4.7
  • CVE-2026-65309

    Storage of passwords in a reversible format

    ANDRITZ · HIPASE-250

    High7.5
  • CVE-2026-1836

    Stored credentials in Redmine

    Redmine · Redmine

    Medium5.3
  • CVE-2026-22574

    A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS…

    Fortinet · FortiSOAR PaaS

    Medium4.1
  • CVE-2026-22576

    A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS…

    Fortinet · FortiSOAR PaaS

    Medium4.1
  • CVE-2025-8095

    Recoverable obfuscation using the OECH1 prefix encoding in OpenEdge

    Progress Software Corporation · OpenEdge

    Critical9.1
  • CVE-2016-15058

    Hirschmann HiLCOS Classic Platform Password Exposure via SNMP

    Belden · Hirschmann HiLCOS Classic Platform

    High8.6

Vendors it comes up for most

  1. ABB4
  2. Fortinet3
  3. Microsoft3
  4. Siemens3
  5. Cisco2
  6. Dell2
  7. IBM2
  8. Ivanti2
  9. Johnson Controls2
  10. Juniper Networks2