# CWE-261.

Every Advisory and CVE whose sources give the weakness CWE-261, newest first.

## Records, newest first

- [Weak password encoding in Płatnik](https://agentprime.io/advisories/CVE-2026-110971.md)
  `CVE-2026-110971` · CVE record: Zakład Ubezpieczeń Społecznych Płatnik · CVSS 7.7 High · Not analysed yet · Published 30 Oct 2026 · Tags: CWE-261
- [Improperly Stored Credentials](https://agentprime.io/advisories/CVE-2026-103548.md)
  `CVE-2026-103548` · CVE record: Itron MV-90 xi · CVSS 5.3 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: CWE-257, CWE-260, CWE-261
- [Dell Secure Connect Gateway (SCG) Policy Manager: Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16…](https://agentprime.io/advisories/CVE-2026-73589.md)
  `CVE-2026-73589` · CVE record: Dell Secure Connect Gateway (SCG) Policy Manager · CVSS 6.3 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: CWE-261
- [Lenovo Dock Manager: During an internal security assessment…](https://agentprime.io/advisories/CVE-2026-63424.md)
  `CVE-2026-63424` · CVE record: Lenovo Dock Manager · CVSS 7.0 High · Not analysed yet · Published 13 Aug 2026 · Tags: CWE-261
- [CSL 1010 M2M 3G WiFi Module 2.2.1.4 Weak Encryption via Router.cfg](https://agentprime.io/advisories/CVE-2026-67596.md)
  `CVE-2026-67596` · CVE record: CSL Mobile Limited CSL 1010 M2M 3G WiFi Module · CVSS 6.9 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-261
- [Dell Client Platform BIOS contains a Weak Encoding for Password vulnerability.](https://agentprime.io/advisories/CVE-2026-40639.md)
  `CVE-2026-40639` · CVE record: Dell Dell Edge Gateway 3000 and 4 more · CVSS 5.7 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-261
- [Weak password encoding in STER](https://agentprime.io/advisories/CVE-2026-25607.md)
  `CVE-2026-25607` · CVE record: Centralny Instytut Ochrony Pracy - Państwowy Instytut Badawczy STER · CVSS 5.7 Medium · Not analysed yet · Published 22 May 2026 · Tags: CWE-261
- [Credentials exposure in tinycontrol devices](https://agentprime.io/advisories/CVE-2025-11500.md)
  `CVE-2025-11500` · CVE record: tinycontrol Lan Kontroler v3.5 and 3 more · CVSS 8.7 High · Not analysed yet · Published 16 Mar 2026 · Tags: Information disclosure, CWE-261
- [Weak KSeF token encoding in Streamsoft Prestiż](https://agentprime.io/advisories/CVE-2026-0809.md)
  `CVE-2026-0809` · CVE record: Streamsoft Streamsoft Prestiż · CVSS 6.3 Medium · Not analysed yet · Published 12 Mar 2026 · Tags: CWE-261
- [A vulnerability has been identified in syngo.plaza VB30E (All versions < VB30E_HF07).](https://agentprime.io/advisories/CVE-2024-52334.md)
  `CVE-2024-52334` · CVE record: Siemens syngo.plaza VB30E · CVSS 6.3 Medium · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-261
- [AutomationDirect CLICK Programmable Logic Controller Weak Encoding for Password](https://agentprime.io/advisories/CVE-2025-67652.md)
  `CVE-2025-67652` · CVE record: AutomationDirect CLICK Programmable Logic Controller · CVSS 6.1 Medium · Not analysed yet · Published 22 Jan 2026 · Tags: CWE-261
- [WEEK ENCODING FOR PASSWORDS](https://agentprime.io/advisories/CVE-2026-22543.md)
  `CVE-2026-22543` · CVE record: EFACEC QC 60/90/120 · CVSS 6.9 Medium · Not analysed yet · Published 7 Jan 2026 · Tags: CWE-261
- [Strapi Password Hashing is Missing Maximum Password Length Validation](https://agentprime.io/advisories/GHSA-2cjv-6wg9-f4f3.md)
  `GHSA-2cjv-6wg9-f4f3`, `CVE-2025-25298` · npm `@strapi/core`: affected `<5.10.3`, fixed in `5.10.3` · CVSS 6.3 Medium · Not analysed yet · Published 16 Oct 2025 · Tags: CWE-261
- [WEAK ENCODING FOR PASSWORD IN DEVICE SERVER CONFIGURATION](https://agentprime.io/advisories/CVE-2025-11155.md)
  `CVE-2025-11155` · CVE record: SATO S86-ex 203dpi · CVSS 6.8 Medium · Not analysed yet · Published 29 Sept 2025 · Tags: CWE-261
- [A logic issue was addressed with improved checks.](https://agentprime.io/advisories/CVE-2025-31229.md)
  `CVE-2025-31229` · CVE record: Apple iOS and iPadOS · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Jul 2025 · Tags: CWE-261
- [Weak encoding for password vulnerability exists in HMI ViewJet C-more series.](https://agentprime.io/advisories/CVE-2025-26401.md)
  `CVE-2025-26401` · CVE record: JTEKT ELECTRONICS CORPORATION HMI ViewJet C-more series · CVSS 6.5 Medium · Not analysed yet · Published 4 Apr 2025 · Tags: CWE-261
- [Weak Encoding for Password vulnerability in saTECH BCU](https://agentprime.io/advisories/CVE-2025-2862.md)
  `CVE-2025-2862` · CVE record: Arteche saTECH BCU · CVSS 6.9 Medium · Not analysed yet · Published 28 Mar 2025 · Tags: CWE-261
- [Weak password encoding in Streamsoft Prestiż](https://agentprime.io/advisories/CVE-2024-7407.md)
  `CVE-2024-7407` · CVE record: Streamsoft Streamsoft Prestiż · CVSS 8.2 High · Not analysed yet · Published 28 Mar 2025 · Tags: CWE-261
- [MB connect line/Helmholz: Weak encryption of configuration file](https://agentprime.io/advisories/CVE-2024-45273.md)
  `CVE-2024-45273` · CVE record: MB connect line mbNET.mini and 4 more · CVSS 8.4 High · Not analysed yet · Published 15 Oct 2024 · Tags: CWE-261
- [PLANET Technology switch devices - Swctrl service exchanges weakly encoded passwords](https://agentprime.io/advisories/CVE-2024-8455.md)
  `CVE-2024-8455` · CVE record: PLANET Technology GS-4210-24PL4C hardware 2.0 and 2 more · CVSS 8.1 High · Not analysed yet · Published 30 Sept 2024 · Tags: CWE-261
- [Advantech ADAM-5630 Weak Encoding for Password](https://agentprime.io/advisories/CVE-2024-34542.md)
  `CVE-2024-34542` · CVE record: Advantech ADAM-5630 · CVSS 6.9 Medium · Not analysed yet · Published 27 Sept 2024 · Tags: CWE-261
- [Advantech ADAM-5550 Weak Encoding for Password](https://agentprime.io/advisories/CVE-2024-37187.md)
  `CVE-2024-37187` · CVE record: Advantech ADAM 5550 · CVSS 6.8 Medium · Not analysed yet · Published 27 Sept 2024 · Tags: CWE-261
- [Secret encryption vulnerable to brute-force attacks](https://agentprime.io/advisories/CVE-2024-45394.md)
  `CVE-2024-45394` · CVE record: Authenticator-Extension Authenticator · CVSS 8.8 High · Not analysed yet · Published 3 Sept 2024 · Tags: Weak cryptography or TLS, CWE-261
- [ColdFusion | Weak Cryptography for Passwords (CWE-261)](https://agentprime.io/advisories/CVE-2024-34113.md)
  `CVE-2024-34113` · CVE record: Adobe ColdFusion · CVSS 5.5 Medium · Not analysed yet · Published 13 Jun 2024 · Tags: CWE-261
- [Weak Encoding for Password vulnerability in Campbell Scientific CSI Web Server and RTMC](https://agentprime.io/advisories/CVE-2024-5434.md)
  `CVE-2024-5434` · CVE record: Campbell Scientific CSI Web Server and RTMC · CVSS 6.9 Medium · Not analysed yet · Published 28 May 2024 · Tags: CWE-261
- [An issue discovered in web-flash v3.0 allows attackers to reset passwords for arbitrary users via crafted POST request to /prod-api/user/resetPassword.](https://agentprime.io/advisories/CVE-2024-28270.md)
  `CVE-2024-28270` · CVE record · CVSS 8.1 High · Not analysed yet · Published 8 Apr 2024 · Tags: CWE-261
- [An issue in secdiskapp 1.5.1 (management program for NewQ Fingerprint Encryption Super Speed Flash Disk) allows attackers to gain escalated privileges via vsVerifyPassword and vsSetFingerPrintPower f…](https://agentprime.io/advisories/CVE-2024-24279.md)
  `CVE-2024-24279` · CVE record · CVSS 8.8 High · Not analysed yet · Published 8 Apr 2024 · Tags: Authentication bypass, CWE-261
- [Commend WS203VICM Weak Encoding for Password](https://agentprime.io/advisories/CVE-2024-23492.md)
  `CVE-2024-23492` · CVE record: Commend WS203VICM · CVSS 5.7 Medium · Not analysed yet · Published 1 Mar 2024 · Tags: CWE-261
- [Lantronix XPort Weak Encoding for Password](https://agentprime.io/advisories/CVE-2023-7237.md)
  `CVE-2023-7237` · CVE record: Lantronix XPort · CVSS 5.7 Medium · Not analysed yet · Published 23 Jan 2024 · Tags: CWE-261
- [Weak Cryptography for Passwords vulnerability on WIC1200](https://agentprime.io/advisories/CVE-2024-0556.md)
  `CVE-2024-0556` · CVE record: Full Compass Systems WIC1200 · CVSS 7.1 High · Not analysed yet · Published 16 Jan 2024 · Tags: CWE-261
- [Weak encoding for password in UDS services](https://agentprime.io/advisories/CVE-2023-28896.md)
  `CVE-2023-28896` · CVE record: JOYNEXT MIB3 Infotainment Unit · CVSS 3.3 Low · Not analysed yet · Published 1 Dec 2023 · Tags: CWE-261
- [Weak encoding vulnerability in easyE4](https://agentprime.io/advisories/CVE-2023-43776.md)
  `CVE-2023-43776` · CVE record: Eaton easyE4 · CVSS 6.8 Medium · Not analysed yet · Published 17 Oct 2023 · Tags: CWE-261
- [Mitsubishi Electric Corporation GOT2000 Series GT27 model: Weak Encoding for Password vulnerability in Mitsubishi Electric Corporation GOT2000…](https://agentprime.io/advisories/CVE-2023-0525.md)
  `CVE-2023-0525` · CVE record: Mitsubishi Electric Corporation GOT2000 Series GT27 model and 4 more · CVSS 7.5 High · Not analysed yet · Published 3 Aug 2023 · Tags: CWE-261
- [AEM Weak Cryptography for Passwords Security feature bypass](https://agentprime.io/advisories/CVE-2023-22271.md)
  `CVE-2023-22271` · CVE record: Adobe Experience Manager · CVSS 5.3 Medium · Not analysed yet · Published 22 Mar 2023 · Tags: CWE-261
- [Dell PowerScale OneFS, versions 8.2.x through 9.3.x contain a weak encoding for a password.](https://agentprime.io/advisories/CVE-2022-34445.md)
  `CVE-2022-34445` · CVE record: Dell PowerScale OneFS · CVSS 6.0 Medium · Not analysed yet · Published 10 Feb 2023 · Tags: CWE-261
- [Dell PowerScale OneFS, versions 8.2.x-9.4.x, contain a weak encoding for a NDMP password.](https://agentprime.io/advisories/CVE-2022-45099.md)
  `CVE-2022-45099` · CVE record: Dell PowerScale OneFS · CVSS 7.8 High · Not analysed yet · Published 1 Feb 2023 · Tags: CWE-261
- [SOCOMEC MODULYS GP: SOCOMEC MODULYS GP Netvision versions 7.20 and prior lack strong encryption for…](https://agentprime.io/advisories/CVE-2023-0356.md)
  `CVE-2023-0356` · CVE record: SOCOMEC MODULYS GP · CVSS 5.7 Medium · Not analysed yet · Published 24 Jan 2023 · Tags: CWE-261
- [An unauthorized user with network access and the decryption key could decrypt sensitive data, such as usernames and passwords.](https://agentprime.io/advisories/CVE-2022-38469.md)
  `CVE-2022-38469` · CVE record: GE Digital Proficy Historian · CVSS 7.5 High · Not analysed yet · Published 17 Jan 2023 · Tags: CWE-261
- [Nextcloud Password Policy's generated passwords are not fully validated by HIBPValidator](https://agentprime.io/advisories/CVE-2022-35931.md)
  `CVE-2022-35931` · CVE record: nextcloud security-advisories · CVSS 2.7 Low · Not analysed yet · Published 6 Sept 2022 · Tags: CWE-261
- [Rockwell Automation FactoryTalk View SE: The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that…](https://agentprime.io/advisories/CVE-2020-14481.md)
  `CVE-2020-14481` · CVE record: Rockwell Automation FactoryTalk View SE · CVSS 7.8 High · Not analysed yet · Published 24 Feb 2022 · Tags: CWE-261
- [Dell EMC Networking X-Series firmware versions prior to 3.0.1.8 and Dell EMC PowerEdge VRTX Switch Module firmware versions prior to 2.0.0.82 contain a Weak Password Encryption Vulnerability.](https://agentprime.io/advisories/CVE-2021-21507.md)
  `CVE-2021-21507` · CVE record: Dell VRTX Switch Modules · CVSS 8.8 High · Not analysed yet · Published 30 Apr 2021 · Tags: CWE-261
- [Insecure crypto for storing passwords](https://agentprime.io/advisories/CVE-2013-1053.md)
  `CVE-2013-1053` · CVE record: Canonical remote-login-service · CVSS 5.5 Medium · Not analysed yet · Published 13 Jan 2021 · Tags: CWE-261
- [C-MORE HMI EA9: This vulnerability allows remote attackers to disclose sensitive information on affected…](https://agentprime.io/advisories/CVE-2020-10919.md)
  `CVE-2020-10919` · CVE record: C-MORE HMI EA9 · CVSS 5.9 Medium · Not analysed yet · Published 23 Jul 2020 · Tags: CWE-261
- [RVD#2565: Weak token generation for the REST API.](https://agentprime.io/advisories/CVE-2020-10275.md)
  `CVE-2020-10275` · CVE record: Mobile Industrial Robots A/S MiR100 · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Jun 2020 · Tags: CWE-261
- [A Weak Cryptography for Passwords issue was discovered in General Electric (GE) Multilin SR 750 Feeder Protection Relay, firmware versions prior to Version 7.47; SR 760 Feeder Protection Relay, firmw…](https://agentprime.io/advisories/CVE-2017-7905.md)
  `CVE-2017-7905` · CVE record: GE Multilin SR, UR, and URplus Protective Relays · No CVSS score · Not analysed yet · Published 30 Jun 2017 · Tags: CWE-261

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-261>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-261/>. Everything for agents: <https://agentprime.io/llms.txt>.