Skip to content

CWE-540 · weakness in Information Disclosure

Inclusion of Sensitive Information in Source Code

36 CVEs

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

Every one of the 36 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Cisco Content Security Management Appliance, Email Security Appliance, and Web Security Appliance Information Disclosure VulnerabilityCVE-2021-1516Cisco · CVSS 4.3 · 1.0% likely

    Cisco

  2. keerti1924 PHP-MYSQL-User-Login-System login.sql inclusion of sensitive information in source codeCVE-2024-2265keerti1924 · CVSS 5.3 · 0.8% likely

    Keerti1924

  3. Sangfor Next-Gen Application Firewall Source Code DisclosureCVE-2023-30802Sangfor · CVSS 5.3 · 0.8% likely

    Sangfor

  4. Inclusion of Sensitive Information in Source Code in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote attac…CVE-2023-23448SICK AG · CVSS 5.3 · 0.8% likely

    SICK AG

  5. Cisco Business 220 Series Smart Switches Static Key and Password VulnerabilitiesCVE-2021-34744Cisco · CVSS 4.9 · 0.7% likely

    Cisco

  6. 云课网络科技有限公司 Yunke Online School System videobind.html sensitive information in sourceCVE-2024-8417Yunknet · CVSS 3.1 · 0.7% likely
  7. ChargePoint Home Flex Inclusion of Sensitive Information in Source Code Information Disclosure VulnerabilityCVE-2026-4155ChargePoint · CVSS 7.5 · 0.7% likely

    ChargePoint

  8. QNAP AI CoreCVE-2024-38647QNAP Systems Inc. · CVSS 7.9 · 0.7% likely

    QNAP

  9. keerti1924 Secret-Coder-PHP-Project secret_coder.sql inclusion of sensitive information in source codeCVE-2024-2355keerti1924 · CVSS 3.7 · 0.6% likely

    Keerti1924

  10. Cisco Business 220 Series Smart Switches Static Key and Password VulnerabilitiesCVE-2021-34757Cisco · CVSS 4.9 · 0.6% likely

    Cisco

  11. Credential disclosureCVE-2025-49182SICK AG · CVSS 7.5 · 0.6% likely

    SICK AG

  12. A inclusion of sensitive information in source code vulnerability in Fortinet FortiMonitorOnSight 7.2.4 through 7.2.7, FortiMonitorOnSight 7.2.0 through 7.2.2 may allow attacker t…CVE-2026-84390Fortinet · CVSS 9.6 · 0.5% likelycovered by CyberSIXT

    Fortinet1 article

  13. Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Sensitive Information in Source Code vulnerability. An unauthenticated att…CVE-2026-73591Dell · CVSS 7.5 · 0.4% likely

    Dell

  14. WebDyne versions from 2.022 before 3.022 for Perl disclose application source to unauthenticated clients via the viewer in the default index pageCVE-2026-78192WebDyne · 0.4% likely
  15. An issue in Loggrove v.1.0 allows a remote attacker to obtain sensitive information via the read.py component.CVE-2025-26013Olajowon · CVSS 8.2 · 0.4% likely
  16. IBM Datacap Navigator information disclosureCVE-2024-39729IBM · CVSS 4.3 · 0.4% likely

    IBM

  17. Vivotek NVR ND8422P/NVR ND9525P/NVR ND9541P HTML Form sensitive information in sourceCVE-2025-3403Vivotek · CVSS 2.7 · 0.4% likely

    Vivotek

  18. Information Disclosure to Source Code in TNB Mobile Solutions' Cockpit SoftwareCVE-2024-1272TNB Mobile Solutions · CVSS 7.5 · 0.4% likely
  19. Inclusion of sensitive information in source code in igloohome Smart Lock Mobile ApplicationCVE-2026-16581igloohome · CVSS 5.3 · 0.4% likely
  20. PMD Designer's release key passphrase (GPG) available on Maven Central in cleartextCVE-2025-23215pmd · CVSS 9.3 · 0.3% likely
  21. IBM Analytics Content Hub information disclosureCVE-2024-38327IBM · CVSS 6.8 · 0.3% likely

    IBM

  22. Inclusion of Sensitive Information in Source Code in GitLabCVE-2024-9596GitLab · CVSS 3.7 · 0.3% likely

    GitLab

  23. IBM Maximo Application Suite information disclosureCVE-2024-35144IBM · CVSS 5.3 · 0.3% likely

    IBM

  24. IBM OpenPages information disclosureCVE-2024-27257IBM · CVSS 4.3 · 0.3% likely

    IBM

  25. IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilitiesCVE-2025-36076IBM · CVSS 4.3 · 0.3% likely

    IBM

  26. IBM Cognos Analytics information disclosureCVE-2025-0923IBM · CVSS 5.3 · 0.3% likely

    IBM

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in