CVE-2021-3131

CVE-2021-3131 Suggested description The Web server in 1C:Enterprise 8 before 8.3.17.1851 sends base64 encoded credentials in the 'creds' URL parameter. VulnerabilityType Other CWE-522 Insufficiently Protected Credentials Vendor of Product 1C Company Affected Product Code Base 1C:Enterprise 8 -...

CVE-2026-20234

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release...

CVE-2026-20234

CVE-2026-20234 affects Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) . The vulnerability is an insufficiently protected credentials issue (CWE-522), discovered through Cisco's internal security review and addressed in a software hardening release . The CV...

CVE-2026-75015

Insufficiently Protected Credentials vulnerability in Apache Syncope. Audit events, when sent to the configured store, are not sufficiently masked for the sensitive values they might carry on their payloads, thus allowing administrators to access such sensitive values. This issue affects Apache...

CVE-2026-82786

Insufficiently protected credentials issue exists in Remote I/O Coupler Unit Server Type CPSN-MCB271-. If this vulnerability is exploited, sensitive information may be restored from a backup file...

CVE-2026-82786

Insufficiently protected credentials issue exists in Remote I/O Coupler Unit Server Type CPSN-MCB271-. If this vulnerability is exploited, sensitive information may be restored from a backup file...

CVE-2026-82786

CVE-2026-82786 affects the Contec Remote I/O Coupler Unit (Server Type) CPSN-MCB271- *. The root cause is an insufficiently protected credentials issue: if exploited, sensitive information may be restored from a backup file . The vulnerability is scored 6.3 (CVSS v3.1, MEDIUM) and 8.2 (CVSS v4.0,...

CVE-2026-81861

CWE-522: Insufficiently Protected Credentials vulnerability that could result in exposure of authentication information and unauthorized access to RTU functionality...

CVE-2026-81861

CVE-2026-81861 affects Schneider Electric SCADAPack and stems from CWE-522 (Insufficiently Protected Credentials) in the Secure Lock component. The flaw could expose authentication information and permit unauthorized access to RTU functionality . The CVSS 4.0 base score is 5.9 (MEDIUM) , with a n...

CVE-2026-81861

CWE-522: Insufficiently Protected Credentials vulnerability that could result in exposure of authentication information and unauthorized access to RTU functionality...

CVE-2026-81861

CWE-522: Insufficiently Protected Credentials vulnerability that could result in exposure of authentication information and unauthorized access to RTU functionality...

PT-2026-89892

🔴 Schneider Electric SCADAPack RTUs vulnerable to credential theft across critical infrastructure Schneider Electric disclosed a vulnerability CVE-2026-81861 affecting SCADAPack x70 Remote Terminal Units deployed worldwide in critical manufacturing and energy sectors. The flaw involves...

CVE-2026-86332

A flaw in the odh-dashboard component of Red Hat OpenShift AI allows any authenticated dashboard user to read Kubernetes Secrets without an authorization check. The backend-for-frontend route GET /api/nim-serving/:nimResource uses the dashboard service account to retrieve and return the full Secr...

Insufficiently Protected Credentials

Overview Affected versions of this package are vulnerable to Insufficiently Protected Credentials via the SendPamAuthPacketFactory process. An attacker can obtain sensitive authentication credentials by intercepting network traffic or acting as a man-in-the-middle server during the authentication...

Insufficiently Protected Credentials

Overview Affected versions of this package are vulnerable to Insufficiently Protected Credentials in the initial-handshake process. An attacker can intercept and obtain database credentials by performing a man-in-the-middle attack during the authentication exchange when the connection is...

NPM: MariaDB has Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials

NPM: MariaDB has Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials vulnerability discovered by ? in WordPress Npm mariadb versions 3.2.4...

CVE-2026-75960 Insufficiently Protected Credentials in Rently Smart Home

Rently Smart Home versions 20.1.0 and prior are vulnerable to an Insufficiently Protected Credentials vulnerability. This could allow an attacker to retrieve pins including the Master Pin, overriding standard user permissions...

PT-2026-82102

Name of the Vulnerable Software and Affected Versions Rently Smart Home versions 20.1.0 and earlier Description Insufficiently protected credentials in the API allow an attacker to retrieve pins, including the Master Pin. This issue enables the override of standard user permissions, potentially...

CVE-2026-65087: Insufficiently Protected Credentials

NVIDIA NemoClaw contains a vulnerability where an attacker could cause insufficiently protected credentials . A successful exploit of this vulnerability might lead to information disclosure and data tampering...

CVE-2026-20359

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...