CVE-2026-73230

Ente provides end-to-end encrypted cloud services and security tools. Prior to 2026.07.28, Ente 2of3 card format version 1 stored the secret byte length and 32-bit FNV-1a checksum in cleartext on every card, allowing someone with one card to test candidate secrets offline and recover low-entropy ...

CVE-2026-73230

The CVE covers Ente: 2of3 cards v1. Before 2026.07.28, the card format version 1 stored the secret byte length and a 32-bit FNV-1a checksum in cleartext on every card. This enables someone with one card to offline-test candidate secrets against low-entropy or predictable secrets, potentially comp...

EUVD-2026-56893

Ente provides end-to-end encrypted cloud services and security tools. Prior to 2026.07.28, Ente 2of3 card format version 1 stored the secret byte length and 32-bit FNV-1a checksum in cleartext on every card, allowing someone with one card to test candidate secrets offline and recover low-entropy ...

CVE-2026-61928

Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally...

EUVD-2026-56333

Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally...

EUVD-2026-56152

TypeBot is a chatbot builder tool. In version 3.16.1, API tokens bearer credentials used to authenticate against the builder API are stored in the database as cleartext strings. An attacker who gains read access to the database e.g., via SQL injection, backup exposure, or insider access can extra...

Windows Hello Tampering Vulnerability

Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally...

CVE-2026-19391

The CVE affects the insights-core password redaction layer, which does not recognize credentials beyond the literal string 'password'. This allows sensitive credentials such as SSSD LDAP bind passwords (ldap_default_authtok) and Pacemaker fence device credentials to be included in cleartext in ar...

CVE-2026-21080

Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data...

CVE-2026-21080

Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data...

CVE-2026-21080

Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data...

CVE-2026-21080

The CVE-2026-21080 affects Smart Switch prior to version 3.7.72.6. It stems from cleartext storage of sensitive information, allowing adjacent attackers to access data. Mitigation: upgrade to 3.7.72.6 or later (as described in the provided references).

EUVD-2026-55105

Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data...

Cisco Catalyst SD-WAN Software Security Hardening (cisco-sa-hardening-sdwan-faLcR3K)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by multiple vulnerabilities. - Multiple vulnerabilities in Cisco Catalyst SD-WAN Software could allow an authenticated, remote attacker to conduct path traversal attacks, gain unauthorized access, or cause a denial ...

CVE-2026-20312

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...

CVE-2026-20312 Cisco Catalyst SD-WAN Security Hardening Release - Information Disclosure Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...

CVE-2026-20312

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...

CVE-2026-20312

Technical details for CVE-2026-20312 are not publicly available in the provided documents. Please monitor for updates from Cisco security advisories and NVD for affected products, versions, and remediation steps.

EUVD-2026-53472

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...

CVE-2026-15721 Query Console SQL Injection Leading to Sensitive Data Disclosure in Bilin Software's HUMANIST Digital Human Resources

Cleartext storage of sensitive information vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows SQL Injection. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...