By weakness (CWE)
CWE-312: related vulnerabilities
CVEs classified under CWE-312. Understanding the weakness class helps prioritize systemic fixes over one-off patches.
7 published vulnerabilities
- CVE-2026-46622HIGH 8.1
SolidInvoice, an open-source invoicing platform, stores API authentication tokens as plain, unencrypted text in its database. Before version 2.3.17, anyone who gains read access to the database—whether through SQL injection, leaked backups, misconfigured database replicas, or insider access—immediately acquires all API credentials for every user without needing to decrypt or crack anything. This turns database compromise into immediate authentication compromise across your entire API surface.
- CVE-2026-36176HIGH 7.1
GNCC GP5 version 7.1.76 leaks Backblaze B2 cloud storage upload credentials to the device's serial console in plaintext. An attacker with physical access to the hardware can monitor the UART interface and capture active, pre-signed upload URLs intended for file transfers. Once captured, these URLs can be used to upload or manipulate files in the connected B2 storage bucket without authorization. The vulnerability requires proximity to the device but poses significant risk to organizations using this gateway in sensitive environments.
- CVE-2026-55885MEDIUM 6.8
Grav, a file-based web platform, contains a vulnerability in versions prior to 1.7.53 that allows authenticated administrators with backup permissions to download sensitive configuration files and password hashes. An attacker with admin credentials and backup access can retrieve a complete backup archive that includes the administrator password hash and site configuration details, potentially enabling lateral movement or privilege escalation. The vulnerability is mitigated by restricting backup permissions and updating to version 1.7.53 or later.
- CVE-2026-10786MEDIUM 6.5
A flaw in Devolutions Server's ticketing integration settings allows authenticated users with low-level permissions to retrieve cleartext credentials for third-party ticketing systems through a specially crafted API request. An attacker with basic user access could exploit this to obtain sensitive integration credentials without proper authorization checks, potentially enabling lateral movement or unauthorized access to connected ticketing platforms.
- CVE-2026-50267MEDIUM 4.7
Steeltoe, a .NET library for building cloud-native applications, inadvertently exposes database credentials to other processes on the same Linux container. When applications configure MySQL or PostgreSQL connections through Cloud Foundry service bindings, Steeltoe temporarily stores TLS client credentials in world-readable files in the system temp directory. These files are never cleaned up, leaving sensitive key material accessible to any other user or process on the same machine. The vulnerability affects Steeltoe.Configuration.Abstractions versions 4.0.0 through 4.1.0 and is resolved in version 4.2.0.
- CVE-2026-38571MEDIUM 4.6
The Tenda N300 F3 router (V603 firmware) stores Wi-Fi security passwords in plain text and allows anyone with physical access to the device's serial port to read them without any authentication. The same serial console also permits attackers to read or write data directly to the device's memory, potentially compromising the router's operation or extracting additional sensitive information. This is a physically proximate attack—the attacker must be able to connect a cable to the device—but requires no special knowledge or authentication once connected.
- CVE-2026-57287MEDIUM 4.3
The Jenkins Job Configuration History Plugin fails to hide encrypted secrets when showing past versions of job and agent configurations. An attacker with Extended Read permissions can view these encrypted secret values in the configuration history, bypassing the normal redaction that would hide them elsewhere in the interface. This is a credentials exposure issue that affects Jenkins administrators and users who rely on the plugin to maintain secure configuration records.