# CWE-760.

Every Advisory and CVE whose sources give the weakness CWE-760, newest first.

## Records, newest first

- [CFNext before 3.1.0 Admin Password Recovery via MD5-Derived Subscription UUID](https://agentprime.io/advisories/CVE-2026-121450.md)
  `CVE-2026-121450` · CVE record: PAICNI CFNext · CVSS 7.7 High · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-760
- [Reversible IP address pseudonymisation in AshAuthentication audit log hash mode](https://agentprime.io/advisories/GHSA-cgqj-pcpq-xhfm.md)
  `GHSA-cgqj-pcpq-xhfm`, `CVE-2026-82759`, `EEF-CVE-2026-82759` · Hex `ash_authentication`: affected `>=4.12.0, <4.15.0 || >=5.0.0-rc.0, <5.0.0-rc.14`, fixed in `4.15.0`, `5.0.0-rc.14` · CVSS 1.8 Low · Not analysed yet · Published 17 Sept 2026 · Tags: CWE-760
- [A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6).](https://agentprime.io/advisories/CVE-2026-46749.md)
  `CVE-2026-46749` · CVE record: Siemens SINEC INS · CVSS 5.0 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-760
- [jasypt-spring-boot Uses a One-Way Hash without a Salt](https://agentprime.io/advisories/GHSA-jgj7-c8vj-w563.md)
  `GHSA-jgj7-c8vj-w563`, `CVE-2026-9370` · Maven `com.github.ulisesbocchio:jasypt-spring-boot` and 1 more: affected `>=3.0.0, <=4.0.4`, no fixed version yet · CVSS 6.3 Medium · Not analysed yet · Published 26 May 2026 · Tags: CWE-759, CWE-760
- [Authentication Weakness on Omada Controllers, Gateways and Access Points](https://agentprime.io/advisories/CVE-2025-9290.md)
  `CVE-2025-9290` · CVE record: TP-Link Systems Inc. Omada Software Controller and 4 more · CVSS 6.0 Medium · Not analysed yet · Published 22 Jan 2026 · Tags: CWE-760
- [One way hash with predictable salt](https://agentprime.io/advisories/CVE-2024-13951.md)
  `CVE-2024-13951` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 6.1 Medium · Not analysed yet · Published 22 May 2025 · Tags: CWE-760
- [Broken or risky cryptographic algorithm in Beta80 Life 1st](https://agentprime.io/advisories/CVE-2025-26486.md)
  `CVE-2025-26486` · CVE record: Beta80 Life 1st · CVSS 6.0 Medium · Not analysed yet · Published 19 Mar 2025 · Tags: Weak cryptography or TLS, CWE-760
- [An issue in Horizon Business Services Inc.](https://agentprime.io/advisories/CVE-2024-38881.md)
  `CVE-2024-38881` · CVE record · CVSS 7.5 High · Not analysed yet · Published 2 Aug 2024 · Tags: CWE-760
- [InHand Networks InRouter 302: InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615…](https://agentprime.io/advisories/CVE-2023-22599.md)
  `CVE-2023-22599` · CVE record: InHand Networks InRouter 302 and 1 more · CVSS 7.0 High · Not analysed yet · Published 12 Jan 2023 · Tags: CWE-760
- [Gutenberg Template Library & Redux Framework <= 4.2.11 Sensitive Information Disclosure](https://agentprime.io/advisories/CVE-2021-38314.md)
  `CVE-2021-38314` · CVE record: Redux.io Gutenberg Template Library & Redux Framework · CVSS 5.3 Medium · EPSS 0.29 · Not analysed yet · Published 2 Sept 2021 · Tags: Information disclosure, CWE-760
- [Modicon M221 (all references, all versions): A CWE-760: Use of a One-Way Hash with a Predictable Salt vulnerability exists in Modicon…](https://agentprime.io/advisories/CVE-2020-28214.md)
  `CVE-2020-28214` · CVE record: Modicon M221 (all references, all versions) · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Dec 2020 · Tags: CWE-760
- [DocuTrac DTISQLInstaller.exe Hard-Coded Salt](https://agentprime.io/advisories/CVE-2018-5552.md)
  `CVE-2018-5552` · CVE record: DocuTrac DTISQLInstaller.exe · CVSS 2.9 Low · Not analysed yet · Published 19 Mar 2018 · Tags: CWE-760

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-760>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-760/>. Everything for agents: <https://agentprime.io/llms.txt>.