CWE-540

38 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 2High 11Medium 18Low 6Not scored 1

CVEs per yearBy the year they were published

CVE-2026-78192
WebDyne versions from 2.022 before 3.022 for Perl disclose application source to unauthenticated clients via the viewer in the default index page
WebDyne
Not scored
CVE-2026-103097
GV-Eye Relay Payment API Key Vulnerability
GeoVision Inc. · GV-Eye
High7.5
CVE-2026-103096
GV-Eye Hardcoded API Key Vulnerability
GeoVision Inc. · GV-Eye
High7.5
CVE-2026-101265
Intelbras TIP 125i Básico sensitive information in source
Intelbras · TIP 125i
Low2.3
CVE-2026-73591
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Sensitive Information in Source Code vulnerability. An…
Dell · Secure Connect Gateway (SCG) Policy Manager
High7.5
CVE-2025-36076
IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities
IBM · Cognos Analytics
Medium4.3
CVE-2026-84390
A inclusion of sensitive information in source code vulnerability in Fortinet FortiMonitorOnSight 7.2.4 through 7.2.7, FortiMonitorOnSight 7.2.0 through 7.2.2…
Fortinet · FortiMonitorOnSight
Critical9.6
CVE-2026-16581
Inclusion of sensitive information in source code in igloohome Smart Lock Mobile Application
igloohome · Smart Lock Mobile Application
Medium6.9
CVE-2026-45728
Algernon: Single-file mode unconditionally enables debug mode
xyproto · algernon
High7.5
CVE-2026-4155
ChargePoint Home Flex Inclusion of Sensitive Information in Source Code Information Disclosure Vulnerability
ChargePoint · Home Flex
High7.5