CVE-2026-61886
Weintek cMT3092X HMI stores user account passwords in plaintext.
CVSS
6.5
Medio
EPSS
0.2%
p14
KEV
—
Exploit Today
4
0-100
Publicado: 24 jul 2026 · Última mod.: 27 jul 2026 · CWE-256
0.2%EPSS · 30 días0.2%
2026-07-252026-07-28
Weintek cMT3092X HMI stores user account passwords in plaintext.
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-41874——
——0Quick.Cart stores hard-coded, plaintext admin credentials in a configuration file. This flaw allows attackers with access to the server file system to retrieve authentication details, potentially leading to privilege escalation.
The vendor assessed the likelihood of exploitation as very low and determined that a fix is not necessary.
Only version 6.7 was tested but all versions should be considered as vulnerable.17hCVE-2026-404307.5 ALT14.2%
——4Pronetiqs IntraVUE Versions 3.2.1a14 and prior have a plaintext storage of a password vulnerability that could expose cleartext credentials through the API.2dCVE-2026-441873.3 BAJ0.5%
——0A flaw was found in the Ansible Lightspeed extension for Visual Studio Code. This vulnerability allows an attacker with local access to the workstation, or malware running with the user's privileges, to read the Google Gemini API key. The extension insecurely stores the API key in plain text within the user's configuration file and writes it to output log files. This information disclosure can lead to the attacker obtaining the API credential and potentially consuming the user's API quota.7dCVE-2026-465137.4 ALT17.8%
——5Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.2, Frogman stored API tokens generated by Tools/CreateApiToken.php:33-36 as raw bin2hex(random_bytes(32)) strings in oc_api_tokens, and Frogman.class.php:78 authenticated the X-Frogman-Token header by comparing it with the stored raw value, allowing database read access to recover reusable active tokens at their assigned permission level, including admin. This issue is fixed in version 1.6.2.12dCVE-2026-148675.5 MED0.6%
——0Credentials of built-in users are insecurely stored in the User directory of PcVue projects, all versions prior to 17.0.0. A local attacker could retrieve users’ credentials.
Active Directory accounts are not affected by this vulnerability.20dCVE-2026-361744.6 MED3.8%
——1GNCC GP5 v7.1.76 was discovered to store sensitive wireless network information in plaintext during routine operations to the serial console. This issue allows physically-proximate attackers to obtain sensitive information, including network credentials, via monitoring the serial UART interface.7d