Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

CWE-261

45 published CVEs are weaknesses of this kind, as the records or NVD name it.

Published CVEs
45
Last 12 months
12
Critical
3
Known exploited
0

Critical 3High 15Medium 25Low 2Not scored 0

CVEs per yearBy the year they were published

  1. 20171
  2. 20202
  3. 20212
  4. 20222
  5. 20238
  6. 202412
  7. 20256
  8. 202612

Newest CVEs

  • CVE-2026-110971

    Weak password encoding in Płatnik

    Zakład Ubezpieczeń Społecznych · Płatnik

    High7.7
  • CVE-2026-103548

    Improperly Stored Credentials

    Itron · MV-90 xi

    Medium5.3
  • CVE-2026-73589

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Weak Encoding for Password vulnerability. A…

    Dell · Secure Connect Gateway (SCG) Policy Manager

    Medium6.3
  • CVE-2026-63424

    During an internal security assessment, an improperly protected key was discovered in Lenovo Dock Manager that could allow a local authenticated user to…

    Lenovo · Dock Manager

    High7.0
  • CVE-2026-67596

    CSL 1010 M2M 3G WiFi Module 2.2.1.4 Weak Encryption via Router.cfg

    CSL Mobile Limited · CSL 1010 M2M 3G WiFi Module

    Medium6.9
  • CVE-2026-40639

    Dell Client Platform BIOS contains a Weak Encoding for Password vulnerability. An unauthenticated attacker with physical access could potentially exploit this…

    Dell · Dell Edge Gateway 3000

    Medium5.7
  • CVE-2026-25607

    Weak password encoding in STER

    Centralny Instytut Ochrony Pracy - Państwowy Instytut Badawczy · STER

    Medium5.7
  • CVE-2025-11500

    Credentials exposure in tinycontrol devices

    tinycontrol · Lan Kontroler v3.5

    High8.7
  • CVE-2026-0809

    Weak KSeF token encoding in Streamsoft Prestiż

    Streamsoft · Streamsoft Prestiż

    Medium6.3
  • CVE-2024-52334

    A vulnerability has been identified in syngo.plaza VB30E (All versions < VB30E_HF07). The affected application does not encrypt the passwords properly. This…

    Siemens · syngo.plaza VB30E

    Medium6.3

Vendors it comes up for most

  1. Dell5
  2. Adobe2
  3. Advantech2
  4. Streamsoft2
  5. Apple1
  6. Arteche1
  7. Authenticator-Extension1
  8. AutomationDirect1
  9. C-MORE1
  10. CSL Mobile Limited1