CVE-2026-101331

IBM Langflow OSS versions 1.0.0 through 1.12.2 are affected by CVE-2026-101331 , which allows a remote authenticated attacker to obtain sensitive information. The root cause is identified as insufficiently protected credentials (CWE-522). This vulnerability results in a High severity impact on co...

CVE-2021-27187

CVE-2021-27187 Descripción sugerida El cliente terminal FX Aggregator de "Sovremennye Delovye Tekhnologii" almacena las credenciales de autenticación en texto claro en login.sav cuando la casilla Guardar contraseña está marcada. Tipo de vulnerabilidad Otro CWE-522 Credenciales insuficientemente...

CVE-2021-3131

CVE-2021-3131 Descripción sugerida El servidor web en 1C:Enterprise 8 anterior a 8.3.17.1851 envía credenciales codificadas en base64 en el parámetro URL 'creds'. Tipo de vulnerabilidad Otro CWE-522 Credenciales insuficientemente protegidas Vendedor del producto 1C Company Código base del product...

CVE-2026-92537

The Newsletter – Send awesome emails from WordPress plugin for WordPress is vulnerable to Insufficiently Protected Credentials in all versions up to, and including, 9.3.9 The plugin's public click-tracking REST route /tnp/l/ is registered with permissioncallback = 'returntrue' and, upon receiving...

CVE-2026-92537

The Newsletter – Send awesome emails from WordPress plugin for WordPress is vulnerable to Insufficiently Protected Credentials in versions up to and including 9.3.9 . The public click-tracking REST route /tnp/l/ allows unauthenticated attackers to receive a subscriber's permanent raw authenticati...

CVE-2026-92537 Newsletter <= 9.3.9 - Unauthenticated Insufficiently Protected Credentials via '/tnp/l/' Click-Tracking REST Endpoint (Raw Subscriber Token Cookie Disclosure)

The Newsletter – Send awesome emails from WordPress plugin for WordPress is vulnerable to Insufficiently Protected Credentials in all versions up to, and including, 9.3.9 The plugin's public click-tracking REST route /tnp/l/ is registered with permissioncallback = 'returntrue' and, upon receiving...

CVE-2026-92537 Newsletter <= 9.3.9 - Unauthenticated Insufficiently Protected Credentials via '/tnp/l/' Click-Tracking REST Endpoint (Raw Subscriber Token Cookie Disclosure)

The Newsletter – Send awesome emails from WordPress plugin for WordPress is vulnerable to Insufficiently Protected Credentials in all versions up to, and including, 9.3.9 The plugin's public click-tracking REST route /tnp/l/ is registered with permissioncallback = 'returntrue' and, upon receiving...

EUVD-2026-90455

The Newsletter – Send awesome emails from WordPress plugin for WordPress is vulnerable to Insufficiently Protected Credentials in all versions up to, and including, 9.3.9 The plugin's public click-tracking REST route /tnp/l/ is registered with permissioncallback = 'returntrue' and, upon receiving...

WordPress Newsletter – Send awesome emails from WordPress plugin <= 9.3.9 - Unauthenticated Insufficiently Protected Credentials vulnerability

Unauthenticated Insufficiently Protected Credentials vulnerability discovered by Swayam in WordPress Plugin Newsletter versions = 9.3.9...

CVE-2026-100298 Insufficiently Protected Credentials in Anjvision YSSD-RTMP-H5

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, two user‑information endpoints can reveal sensitive device and account details under conditions that are not intended for normal operation...

CVE-2026-92680 Araxis Merge insufficiently protected credentials

Araxis Merge for Windows version 2011.4074 through 2026.0 stores user-configured credentials for remote servers in the Windows registry and does not apply sufficient cryptographic protection. An authenticated, non-administrative attacker could retrieve and unencrypt all credentials the target use...

CVE-2026-92680: Insufficiently Protected Credentials

Araxis Merge for Windows version 2011.4074 through 2026.0 stores user-configured credentials for remote servers in the Windows registry and does not apply sufficient cryptographic protection. An authenticated, non-administrative attacker could retrieve and unencrypt all credentials the target use...

EUVD-2026-84954

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a local attacker to obtain sensitive information due to insufficiently protected credentials...

EUVD-2026-84964

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a local attacker to obtain sensitive information and perform unauthorized actions due to insufficiently protected credentials...

CVE-2026-81208: Insufficiently Protected Credentials

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow an authenticated user to access sensitive information due to improper handling of encrypted credentials. An attacker could exploit this vulnerability to obtain credentials intended for other users or environments...

CVE-2026-18124

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a local attacker to obtain sensitive information due to insufficiently protected credentials...

CVE-2026-17643

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a local attacker to obtain sensitive information and perform unauthorized actions due to insufficiently protected credentials...

CVE-2026-18124

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is impacted by a vulnerability where a local attacker can obtain sensitive information due to insufficiently protected credentials (CWE-522 ). This issue affects versions 4.0.6.0 through 4.0.10.0 (including specific iFix releases). The ...

CVE-2026-18124 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a local attacker to obtain sensitive information due to insufficiently protected credentials...

CVE-2026-17643 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a local attacker to obtain sensitive information and perform unauthorized actions due to insufficiently protected credentials...