Skip to content
CVE Tracker

CWE-259

222 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.

All 222 in the listAtom feed of new CVEsWhat CWE-259 is, at MITRE (opens in a new tab)
Published CVEs
222
Last 12 months
59
Critical
64
Known exploited
1

Critical 64High 53Medium 84Low 21Not scored 0

CVEs per yearBy the year they were published

  1. 20193
  2. 20191
  3. 20209
  4. 202111
  5. 20223
  6. 20238
  7. 20232
  8. 20235
  9. 202419
  10. 202550
  11. 202647
  12. 202662

Known exploitedNewest addition to KEV first

  • CVE-2026-20316

    Cisco Secure Firewall Management Center Software Static Credential Vulnerability

    Cisco · Cisco Secure Firewall Management Center (FMC)

    ExploitedMedium5.3

Newest CVEs

  • CVE-2026-121609

    Qihoo 360 Whole Home Router M5 Boot Script mpt start hard-coded credentials

    Qihoo 360 · Whole Home Router M5

    Critical10.0
  • CVE-2026-113736

    D-Link DHP-W610AV HNAP Login defaultvalue.xml login_prepare_hnap empty password

    D-Link · DHP-W610AV

    Critical9.3
  • CVE-2026-112146

    D-Link E15/M32/R15/R32 MQTT Broker passwd hard-coded credentials

    D-Link · E15

    Medium5.3
  • CVE-2026-110667

    cemtan sar2html sar2html.py hard-coded credentials

    cemtan · sar2html

    Medium6.9
  • CVE-2026-108831

    meetecho janus-gateway Admin API admin.js hard-coded credentials

    meetecho · janus-gateway

    Medium5.3
  • CVE-2026-108584

    FunnyWolf Viper config hard-coded credentials

    FunnyWolf · Viper

    Medium6.9
  • CVE-2026-105147

    SciPhi-AI R2R JWT Secret hard-coded credentials

    SciPhi-AI · R2R

    Medium6.9
  • CVE-2026-105141

    topoteretes cognee JWT Signing Key get_api_auth_backend.py get_user_id_by_email hard-coded credentials

    topoteretes · cognee

    Medium5.3
  • CVE-2026-70413

    Dell Live Optics Collector, versions prior to 27.2.13.310, contain(s) a Use of Hard-coded Password vulnerability. A low privileged attacker with local access…

    Dell · Live Optics Collector

    Medium5.6
  • CVE-2026-101052

    refly-ai refly JWT Token app.config.ts hard-coded credentials

    refly-ai · refly

    Medium6.9

Vendors it comes up for most

  1. Tenda10
  2. TOTOLINK7
  3. D-Link6
  4. Dell6
  5. Cisco3
  6. Flock Safety3
  7. LB-LINK3
  8. Mitsubishi Electric Corporation3
  9. NETAPP3
  10. QNAP Systems Inc.3