CWE-258

CVEs per yearBy the year they were published

1. 20181
2. 20191
3. 20211
4. 20231
5. 20244
6. 20252
7. 20263

Newest CVEs

• CVE-2026-113736

  D-Link DHP-W610AV HNAP Login defaultvalue.xml login_prepare_hnap empty password

  D-Link · DHP-W610AV

  Critical9.3
• CVE-2026-84398

  CareCam CM2507 Empty Password in Configuration File

  CareCam · HMT.CM2507 Firmware

  High8.7
• CVE-2025-15679

  BMC root account active without password on BullSequana XH3406 and XH3515

  Bull · BullSequana XH3406

  High7.3
• CVE-2025-9276

  Cockroach Labs cockroach-k8s-request-cert Empty Root Password Authentication Bypass Vulnerability

  Cockroach Labs · cockroach-k8s-request-cert

  Critical9.8
• CVE-2025-4395

  Medtronic MyCareLink Patient Monitor Empty Password Vulnerability

  Medtronic · MyCareLink Patient Monitor 24950

  Medium6.8
• CVE-2024-35137

  IBM Security Access Manager Docker information disclosure

  IBM · Security Verify Access Docker

  Medium6.2
• CVE-2024-4106

  A vulnerability has been found in FAST/TOOLS and CI Server. The affected products have built-in accounts with no passwords set. Therefore, if the product is…

  Yokogawa Electric Corporation · FAST/TOOLS

  Medium5.3
• CVE-2024-28744

  The password is empty in the initial configuration of ACERA 9010-08 firmware v02.04 and earlier, and ACERA 9010-24 firmware v02.04 and earlier. An…

  FURUNO SYSTEMS Co.,Ltd. · ACERA 9010-08

  High8.8
• CVE-2023-43016

  IBM Security Access Manager Container unauthorized access

  IBM · Security Verify Access Appliance

  High7.3
• CVE-2023-39439

  SAP Commerce accepts empty passphrases.

  SAP_SE · SAP Commerce

  High8.8

Vendors it comes up for most

1. IBM2
2. Bull1
3. CA Technologies, A Broadcom Company1
4. CareCam1
5. Cockroach Labs1
6. D-Link1
7. FURUNO SYSTEMS Co.,Ltd.1
8. Medtronic1
9. SAP_SE1
10. Yokogawa Electric Corporation1