CVE-2026-56694

NanoClaw

CVE-2026-26049: Insufficiently Protected Credentials

The web management interface of the device renders the passwords in a plaintext input field. The current password is directly visible to anyone with access to the UI, potentially exposing administrator credentials to unauthorized observation via shoulder surfing, screenshots, or browser form...

PT-2020-18242

Name of the Vulnerable Software and Affected Versions IBM Curam Social Program Management versions 7.0.9 through 7.0.10 Description The issue is related to the OOTB build scripts not setting the secure attribute on session cookies. This may allow unauthorized parties to observe cookies...