Reliance on HTTP instead of HTTPS

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. Insecure HTTP configuration retrieval in Sogou Input Method allows arbitrary code executionCVE-2026-120422Sogou · CVSS 8.9 · 0.4% likelycovered by CyberSIXT

   SlippyNunchucks2 articles1 article this week: Weekly report flags attacks on Siemens, Zyxel and Sogou

2. The use of insecure HTTP transport within AMD optional tools could allow an attacker to conduct a man-in-the-middle attack, potentially leading to arbitrary code execution.CVE-2026-40677AMD · CVSS 7.7 · 0.4% likely

   AMD

3. PROMOD V is using insecure HTTP communication instead of HTTPS. The vulnerability is due to the lack of HTTPS support from 3rd party Digipede server.CVE-2026-10763Hitachi Energy · CVSS 7 · 0.4% likely

   Hitachi Energy

4. Lack of traffic encryption in PłatnikCVE-2026-110970Zakład Ubezpieczeń Społecznych · CVSS 2.3 · 0.3% likely
5. Cleartext Transmission of Sensitive Information in mH-DEVELOPERCVE-2026-82933F&F Filipowski · CVSS 6 · 0.2% likely

   F&F Filipowski

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.