# CWE-759.

Every Advisory and CVE whose sources give the weakness CWE-759, newest first.

## Records, newest first

- [CallBackery versions before 0.62.0 for Perl store user passwords as unsalted HMAC-SHA1 hashes](https://agentprime.io/advisories/CVE-2026-13576.md)
  `CVE-2026-13576` · CVE record · CVSS 7.5 High · Not analysed yet · Published 30 Oct 2026 · Tags: Weak cryptography or TLS, CWE-759
- [sfturing hosp_order User Password MD5.java MD5.getMD5 hash without salt](https://agentprime.io/advisories/CVE-2026-96552.md)
  `CVE-2026-96552` · CVE record: sfturing hosp_order · CVSS 2.3 Low · Not analysed yet · Published 23 Sept 2026 · Tags: CWE-325, CWE-759
- [Information Disclosure in Pik Online Software's Portal](https://agentprime.io/advisories/CVE-2026-6217.md)
  `CVE-2026-6217` · CVE record: Pik Online Software Solutions Inc. Pik Online Portal · CVSS 6.3 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: CWE-759
- [IBM Integrated Analytics System (IIAS) is affected by a predictable salt vulnerability in Magneto component](https://agentprime.io/advisories/CVE-2025-36271.md)
  `CVE-2025-36271` · CVE record: IBM Integrated Analytics System · CVSS 5.9 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: CWE-759
- [A vulnerability has been identified in LOGO!](https://agentprime.io/advisories/CVE-2026-57263.md)
  `CVE-2026-57263` · CVE record: Siemens LOGO! Soft Comfort · CVSS 7.0 High · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-759
- [Weak Credential Storage in TP-Link Omada Devices](https://agentprime.io/advisories/CVE-2025-15631.md)
  `CVE-2025-15631` · CVE record: TP-Link Systems Inc. Omada Gateways and 3 more · CVSS 5.7 Medium · Not analysed yet · Published 3 Aug 2026 · Tags: CWE-759
- [Weak Credential Protection During TP-Link Omada Device Adoption](https://agentprime.io/advisories/CVE-2025-15544.md)
  `CVE-2025-15544` · CVE record: TP-Link Systems Inc. Omada Gateways and 4 more · CVSS 6.9 Medium · Not analysed yet · Published 3 Aug 2026 · Tags: CWE-759
- [WeGIA: Use of Weak Password Hashing Algorithm (SHA-256, no salt) in html/login.php](https://agentprime.io/advisories/CVE-2026-45027.md)
  `CVE-2026-45027` · CVE record: LabRedesCefetRJ WeGIA · CVSS 5.9 Medium · Not analysed yet · Published 27 May 2026 · Tags: Weak cryptography or TLS, CWE-759
- [jasypt-spring-boot Uses a One-Way Hash without a Salt](https://agentprime.io/advisories/GHSA-jgj7-c8vj-w563.md)
  `GHSA-jgj7-c8vj-w563`, `CVE-2026-9370` · Maven `com.github.ulisesbocchio:jasypt-spring-boot` and 1 more: affected `>=3.0.0, <=4.0.4`, no fixed version yet · CVSS 6.3 Medium · Not analysed yet · Published 26 May 2026 · Tags: CWE-759, CWE-760
- [electerm's encrypt method not safe enough](https://agentprime.io/advisories/GHSA-g29v-q6h7-76wh.md)
  `GHSA-g29v-q6h7-76wh`, `CVE-2026-45787` · npm `electerm`: affected `<3.9.5`, fixed in `3.9.5` · CVSS 6.0 Medium · Not analysed yet · Published 14 May 2026 · Tags: Weak cryptography or TLS, CWE-329, CWE-353, CWE-759
- [Multiple Vulnerabilities in IBM Concert Software.](https://agentprime.io/advisories/CVE-2025-36253.md)
  `CVE-2025-36253` · CVE record: IBM Concert · CVSS 5.9 Medium · Not analysed yet · Published 2 Feb 2026 · Tags: CWE-759
- [Vasion Print (formerly PrinterLogic) Insecure Password Hashing](https://agentprime.io/advisories/CVE-2025-34208.md)
  `CVE-2025-34208` · CVE record: Vasion Print Virtual Appliance Host and 1 more · CVSS 8.2 High · Not analysed yet · Published 2 Oct 2025 · Tags: Weak cryptography or TLS, CWE-759
- [Predictable Salt and Weak Hashing Algorithm](https://agentprime.io/advisories/CVE-2025-10205.md)
  `CVE-2025-10205` · CVE record: ABB FLXEON · CVSS 8.7 High · Not analysed yet · Published 17 Sept 2025 · Tags: CWE-759
- [NeuVector has an insecure password storage and is vulnerable to rainbow attack](https://agentprime.io/advisories/GHSA-8ff6-pc43-jwv3.md)
  `GHSA-8ff6-pc43-jwv3`, `CVE-2025-53884`, `GO-2025-3917` · Go `github.com/neuvector/neuvector`: affected `<0.0.0-20250825191744-da1a462074c3`, fixed in `0.0.0-20250825191744-da1a462074c3` · CVSS 5.3 Medium · Not analysed yet · Published 28 Aug 2025 · Tags: Weak cryptography or TLS, CWE-759
- [Retrievable password hash protecting TSplus admin console](https://agentprime.io/advisories/CVE-2025-5922.md)
  `CVE-2025-5922` · CVE record: TSplus TSplus Remote Access · CVSS 4.8 Medium · Not analysed yet · Published 29 Jul 2025 · Tags: Hard-coded credentials, CWE-759
- [Manifest Uses a One-Way Hash without a Salt](https://agentprime.io/advisories/GHSA-h8h6-7752-g28c.md)
  `GHSA-h8h6-7752-g28c`, `CVE-2025-27408` · npm `manifest`: affected `<4.9.2`, fixed in `4.9.2` · CVSS 4.8 Medium · Not analysed yet · Published 3 Mar 2025 · Tags: CWE-759
- [IBM Security Verify Governance information disclosure](https://agentprime.io/advisories/CVE-2023-33838.md)
  `CVE-2023-33838` · CVE record: IBM Security Verify Governance · CVSS 4.4 Medium · Not analysed yet · Published 29 Jan 2025 · Tags: CWE-759
- [PLANET Technology switch devices - Weak hash for users' passwords](https://agentprime.io/advisories/CVE-2024-8453.md)
  `CVE-2024-8453` · CVE record: PLANET Technology GS-4210-24PL4C hardware 2.0 and 1 more · CVSS 4.9 Medium · Not analysed yet · Published 30 Sept 2024 · Tags: Weak cryptography or TLS, CWE-759
- [An issue was discovered on Swissphone DiCal-RED 4009 devices.](https://agentprime.io/advisories/CVE-2024-36440.md)
  `CVE-2024-36440` · CVE record · CVSS 6.8 Medium · Not analysed yet · Published 22 Aug 2024 · Tags: Weak cryptography or TLS, CWE-759, CWE-1393
- [FluentCRM - Marketing Automation For WordPress <= 2.8.01 - Insufficient Use of Hash as Authorization Control](https://agentprime.io/advisories/CVE-2023-1430.md)
  `CVE-2023-1430` · CVE record: techjewel FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution · CVSS 6.5 Medium · Not analysed yet · Published 9 Jun 2023 · Tags: CWE-759
- [B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus](https://agentprime.io/advisories/CVE-2020-25164.md)
  `CVE-2020-25164` · CVE record: B. Braun Melsungen AG SpaceCom and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Apr 2022 · Tags: CWE-759
- [Use of a One-Way Hash without a Salt in OnlineVotingSystem](https://agentprime.io/advisories/CVE-2021-21253.md)
  `CVE-2021-21253` · CVE record: dbijaya OnlineVotingSystem · CVSS 5.8 Medium · Not analysed yet · Published 21 Jan 2021 · Tags: CWE-759
- [GE Digital APM Classic, Versions 4.4 and prior.](https://agentprime.io/advisories/CVE-2020-16244.md)
  `CVE-2020-16244` · CVE record: GE Digital APM Classic · No CVSS score · Not analysed yet · Published 23 Sept 2020 · Tags: CWE-759

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-759>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-759/>. Everything for agents: <https://agentprime.io/llms.txt>.