CVE-2021-27187

CVE-2021-27187 Suggested description The FX Aggregator terminal client by "Sovremennye Delovye Tekhnologii" stores authentication credentials in cleartext in login.sav when the Save Password box is checked. VulnerabilityType Other CWE-522 Insufficiently Protected Credentials Vendor of Product OOO...

CVE-2021-3131

CVE-2021-3131 Suggested description The Web server in 1C:Enterprise 8 before 8.3.17.1851 sends base64 encoded credentials in the 'creds' URL parameter. VulnerabilityType Other CWE-522 Insufficiently Protected Credentials Vendor of Product 1C Company Affected Product Code Base 1C:Enterprise 8 -...

CVE-2026-86332

A flaw was found in odh-dashboard in Red Hat OpenShift AI. The backend-for-frontend route GET /api/nim-serving/:nimResource reads Kubernetes Secrets using the dashboard service account and returns the full Secret object, including .data, without an authorization check. Any authenticated dashboard...

Insufficiently Protected Credentials

Overview Affected versions of this package are vulnerable to Insufficiently Protected Credentials via the SendPamAuthPacketFactory process. An attacker can obtain sensitive authentication credentials by intercepting network traffic or acting as a man-in-the-middle server during the authentication...

Insufficiently Protected Credentials

Overview Affected versions of this package are vulnerable to Insufficiently Protected Credentials in the initial-handshake process. An attacker can intercept and obtain database credentials by performing a man-in-the-middle attack during the authentication exchange when the connection is...

CVE-2026-75960

Rently Smart Home versions 20.1.0 and prior are vulnerable to an Insufficiently Protected Credentials vulnerability. This could allow an attacker to retrieve pins including the Master Pin, overriding standard user permissions...

CVE-2026-75960 Insufficiently Protected Credentials in Rently Smart Home

Rently Smart Home versions 20.1.0 and prior are vulnerable to an Insufficiently Protected Credentials vulnerability. This could allow an attacker to retrieve pins including the Master Pin, overriding standard user permissions...

CVE-2026-75960

Rently Smart Home versions 20.1.0 and prior are affected by an Insufficiently Protected Credentials vulnerability that allows an attacker to retrieve PINs, including the Master Pin , thereby overriding standard user permissions. CISA rates this HIGH severity (CVSS 3.1: 8.1, CVSS 4.0: 8.7) with a ...

PT-2026-82102

Name of the Vulnerable Software and Affected Versions Rently Smart Home versions 20.1.0 and earlier Description Insufficiently protected credentials in the API allow an attacker to retrieve pins, including the Master Pin. This issue enables the override of standard user permissions, potentially...

CVE-2026-65087

NVIDIA NemoClaw contains a vulnerability due to insufficiently protected credentials . A successful exploit could lead to information disclosure and data tampering . The CVSS 3.1 base score is 5.6 (Medium) , with a local attack vector , low attack complexity, low privileges required, and user int...

CVE-2026-20359

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

CVE-2026-20359

CVE-2026-20359 affects Cisco Crosswork products, classified as a CWE-522 (insufficiently protected credentials) issue discovered during an internal security review. CVSS 3.1 scores it 9.9 CRITICAL (network vector, low privileges required). No specific affected component, version, or patch details...

CVE-2026-14564

Insufficiently Protected Credentials vulnerability in Innotim Software Telecommunications and Consulting Trade Ltd. Co. Logsign SIEM allows Retrieve Embedded Sensitive Data. This issue affects Logsign SIEM: from 6.4.97 before 6.4.114...

BIT-GITLAB-2026-16553 Insufficiently Protected Credentials in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 18.8 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed some sensitive information to be disclosed to an unintended host due to improper handling of upstream requests in...

Microsoft SharePoint Server Spoofing Vulnerability

Insufficiently protected credentials in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

PT-2026-70568

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Insufficiently protected credentials allow an authorized attacker to perform spoofing over a network, which enables them to affect the system. Recommendations At the momen...

CVE-2026-16553 Insufficiently Protected Credentials in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 18.8 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed some sensitive information to be disclosed to an unintended host due to improper handling of upstream requests in...

CVE-2026-14354

CWE-522 Insufficiently Protected Credentials vulnerability exists that could cause authentication bypass and unauthorized credential modification, potentially leading to compromise of managed devices, when a local privileged attacker leverages weaknesses in the handling and protection of stored...

CVE-2026-14354

CWE-522 Insufficiently Protected Credentials vulnerability exists that could cause authentication bypass and unauthorized credential modification, potentially leading to compromise of managed devices, when a local privileged attacker leverages weaknesses in the handling and protection of stored...

EUVD-2026-44528

CAI Content Credentials is affected by an Insufficiently Protected Credentials vulnerability that could result in disclosure of sensitive information. An attacker could leverage this vulnerability to gain unauthorized read access. Exploitation of this issue does not require user interaction...