CWE-1428 · 4 records
Reliance on HTTP instead of HTTPS
CVEs in this class
4 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
30Monitor | CVE-2026-40677No exploit | The use of insecure HTTP transport within AMD optional tools could allow an attacker to conduct a man-in-the-middle attack, potentially leadamd · amd management console (amc) · CWE-1428 | High7.7 | — | 0.4% | Jun 12, 2026 |
28Monitor | CVE-2026-10763No exploit | PROMOD V is using insecure HTTP communication instead of HTTPS.hitachi energy · promod v · CWE-1428 | High7.0 | — | 0.4% | Jun 30, 2026 |
24Monitor | CVE-2026-82933No exploit | Cleartext Transmission of Sensitive Information in mH-DEVELOPERf&f filipowski · mh-developer · CWE-1428 | Medium6.0 | — | 0.2% | Sep 28, 2026 |
9Monitor | CVE-2026-110970No exploit | Lack of traffic encryption in Płatnikzakład ubezpieczeń społecznych · płatnik · CWE-1428 | Low2.3 | — | — | 1 day ago |
- CVE-2026-4067730Monitor
The use of insecure HTTP transport within AMD optional tools could allow an attacker to conduct a man-in-the-middle attack, potentially lead
HighCVSS 7.7No exploitEPSS 0%amd · amd management console (amc)Jun 12, 2026
- CVE-2026-1076328Monitor
PROMOD V is using insecure HTTP communication instead of HTTPS.
HighCVSS 7.0No exploitEPSS 0%hitachi energy · promod vJun 30, 2026
- CVE-2026-8293324Monitor
Cleartext Transmission of Sensitive Information in mH-DEVELOPER
MediumCVSS 6.0No exploitEPSS 0%f&f filipowski · mh-developerSep 28, 2026
- CVE-2026-1109709Monitor
Lack of traffic encryption in Płatnik
LowCVSS 2.3No exploitzakład ubezpieczeń społecznych · płatnik1 day ago