CWE-523

CVEs per yearBy the year they were published

1. 20171
2. 20201
3. 20212
4. 20221
5. 20233
6. 20243
7. 20257
8. 20269

Newest CVEs

• CVE-2026-113866

  Account password sent unencrypted during Exchange account setup

  Mozilla · Thunderbird

  Medium5.9
• CVE-2026-17620

  IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

  IBM · Financial Transaction Manager (FTM) for RedHat OpenShift

  Medium5.3
• CVE-2026-56587

  HCL IEM was affected with Strict transport security not enforced

  HCLSoftware · IntelliOps Event Management

  Low3.7
• CVE-2026-54784

  CoreWCF: SPNEGO SecurityContextToken proof key wrapped without confidentiality

  CoreWCF · CoreWCF

  High7.4
• CVE-2026-8668

  Hardcoded credentials in embedded content

  Progress Chef · Chef360

  Low2.3
• CVE-2026-36610

  Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 transmits DDNS credentials over plaintext HTTP with only Base64 encoding. The firmware contains no TLS…

  Product not named

  Medium5.9
• CVE-2026-8673

  Password re-initialization mechanism sends passwords in plain text

  syslink software AG · Avantra

  Medium5.9
• CVE-2026-23635

  Kiteworks Secure Data Forms has a potential Unprotected Transport of Credentials

  kiteworks · Secure Data Forms

  Medium6.5
• CVE-2025-61916

  Spinnaker vulnerable to SSRF due to improper restrictions on http from user input

  spinnaker · spinnaker

  High7.9
• CVE-2025-66029

  Open OnDemand affected by Apache proxy passing sensitive headers

  OSC · ondemand

  High7.6

Vendors it comes up for most

1. Brightpick AI2
2. IBM2
3. Apache Software Foundation1
4. Brocade1
5. CODESYS1
6. Cisco1
7. CoreWCF1
8. HCLSoftware1
9. Moxa1
10. Mozilla1