Threats Tagged 'cwe-256'
View all threats tagged with 'cwe-256'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cwe-256'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-50641: CWE-256 Plaintext Storage of a Password in Streamsoft Business IntelligenceCVE-2026-50641 0 Streamsoft Business Intelligence versions prior to 6.8.0.0 store user passwords in plaintext within the database. This vulnerability was addressed in version 6.8.0.0, and users were required to change their passwords upon first login after the update. The issue is classified under CWE-256, indicating improper storage of sensitive information. Join the discussion | CVE Database V5 | 07/29/2026, 12:37:58 UTC Added: 07/29/2026, 13:22:41 UTC |
CVE-2026-41874: CWE-256 Plaintext Storage of a Password in OpenSolution Quick.CartCVE-2026-41874 0 Quick.Cart stores hard-coded, plaintext admin credentials in a configuration file. This flaw allows attackers with access to the server file system to retrieve authentication details, potentially leading to privilege escalation. The vendor assessed the likelihood of exploitation as very low and determined that a fix is not necessary. Only version 6.7 was tested but all versions should be considered as vulnerable. Join the discussion | CVE Database V5 | 07/28/2026, 12:02:45 UTC Added: 07/28/2026, 12:37:43 UTC |
CVE-2026-61886: CWE-256 in Weintek cMT3092X firmwareCVE-2026-61886 0 Weintek cMT3092X HMI stores user account passwords in plaintext. Join the discussion | CVE Database V5 | 07/24/2026, 22:10:03 UTC Added: 07/24/2026, 22:22:41 UTC |
CVE-2026-40430: CWE-256 Plaintext storage of a password in Pronetiqs Panduit IntravueCVE-2026-40430 0 Pronetiqs IntraVUE Versions 3.2.1a14 and prior have a plaintext storage of a password vulnerability that could expose cleartext credentials through the API. Join the discussion | CVE Database V5 | 07/23/2026, 21:58:33 UTC Added: 07/23/2026, 22:37:36 UTC |
Showing 1 to 4 of 4 results