CWE-759

CVEs per yearBy the year they were published

1. 20201
2. 20211
3. 20221
4. 20231
5. 20242
6. 20256
7. 202611

Newest CVEs

• CVE-2026-13576

  CallBackery versions before 0.62.0 for Perl store user passwords as unsalted HMAC-SHA1 hashes

  CallBackery

  High7.5
• CVE-2026-96552

  sfturing hosp_order User Password MD5.java MD5.getMD5 hash without salt

  sfturing · hosp_order

  Low2.3
• CVE-2026-6217

  Information Disclosure in Pik Online Software's Portal

  Pik Online Software Solutions Inc. · Pik Online Portal

  Medium6.3
• CVE-2025-36271

  IBM Integrated Analytics System (IIAS) is affected by a predictable salt vulnerability in Magneto component

  IBM · Integrated Analytics System

  Medium5.9
• CVE-2026-57263

  A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9). The project password feature in the affected products stores the password as an…

  Siemens · LOGO! Soft Comfort

  High7.0
• CVE-2025-15631

  Weak Credential Storage in TP-Link Omada Devices

  TP-Link Systems Inc. · Omada Gateways

  Medium5.7
• CVE-2025-15544

  Weak Credential Protection During TP-Link Omada Device Adoption

  TP-Link Systems Inc. · Omada Gateways

  Medium6.9
• CVE-2026-45787

  electerm's encrypt method not safe enough

  electerm · electerm

  Medium6.0
• CVE-2026-45027

  WeGIA: Use of Weak Password Hashing Algorithm (SHA-256, no salt) in html/login.php

  LabRedesCefetRJ · WeGIA

  Medium5.9
• CVE-2026-9370

  ulisesbocchio jasypt-spring-boot Password Hash SimpleGCMConfig.java getSecretKeySaltGenerator hash predictable salt

  ulisesbocchio · jasypt-spring-boot

  Medium6.3

Vendors it comes up for most

1. IBM3
2. TP Link Systems Inc.2
3. TP-Link Systems Inc.2
4. ABB1
5. B. Braun Melsungen AG1
6. LabRedesCefetRJ1
7. PLANET Technology1
8. Pik Online Software Solutions Inc.1
9. SUSE1
10. Siemens1