CWE-1428 · Cryptography
Reliance on HTTP instead of HTTPS
5CVEs
SortMost likely exploited
5 CVEs with CWE-1428 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2026-120422Insecure HTTP configuration retrieval in Sogou Input Method allows arbitrary code executionSogou · Sogou Input Method · CVSS 8.9 · 2026-11-04 | 8.9 | 0.4% | 2026-11-04 |
| CVE-2026-40677The use of insecure HTTP transport within AMD optional tools could allow an attacker to conduct a man-in-the-middle attack, potentially leading to arbitrary code execution.AMD · AMD Management Console (AMC) · CVSS 7.7 · 2026-06-12 | 7.7 | 0.4% | 2026-06-12 |
| CVE-2026-10763PROMOD V is using insecure HTTP communication instead of HTTPS. The vulnerability is due to the lack of HTTPS support from 3rd party Digipede server.Hitachi Energy · PROMOD V · CVSS 7 · 2026-06-30 | 7.0 | 0.4% | 2026-06-30 |
| CVE-2026-110970Lack of traffic encryption in PłatnikZakład Ubezpieczeń Społecznych · Płatnik · CVSS 2.3 · 2026-10-30 | 2.3 | 0.3% | 2026-10-30 |
| CVE-2026-82933Cleartext Transmission of Sensitive Information in mH-DEVELOPERF&F Filipowski · mH-DEVELOPER · CVSS 6 · 2026-09-28 | 6.0 | 0.2% | 2026-09-28 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.