CWE-313: Cleartext Storage in a File or on Disk
The product stores sensitive information in cleartext in a file, or on disk.
31 tracked CVEs are classified under this weakness.
Highest-risk vulnerabilities
- CVE-2025-64305 — Columbia Weather Systems MicroServer Cleartext Storage in a File or on Disk
- CVE-2024-38280 — Cleartext Storage in a File or on Disk in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)
- CVE-2026-52783 — OpenProject: Information Disclosure (cleartext storage of data) on localhost through memcached via Others "storage.<id>.httpx_access_token" leads to Sensitive Data Exposure
- CVE-2026-24349 — A vulnerability has been identified in SIMATIC WinCC Unified PC Runtime V16 (All versions), SIMATIC WinCC Unified PC Run
- CVE-2024-20448 — Cisco Nexus Dashboard Fabric Controller Credential Information Disclosure Vulnerability
- CVE-2025-36154 — IBM Concert Software Cleartext Storage in a File or on Disk.
- CVE-2024-5916 — PAN-OS: Cleartext Exposure of External System Secrets
- CVE-2026-5531 — SourceCodester Student Result Management System HTTP GET Request login_credentials.txt cleartext storage in file
- CVE-2025-4397 — Medtronic MyCareLink Patient Monitor Data Encryption Weakness
- CVE-2026-8804 — Cleartext Storage of Sensitive Information for Puppet Resource API
- CVE-2026-14663 — PostgreSQL pgcrypto, for OpenSSL-disabled ciphers, silently encrypts to and decrypts from cleartext
- CVE-2025-5154 — PhonePe App SQLite Database databases cleartext storage in a file or on disk
- CVE-2024-9040 — code-projects Blood Bank Management System Password cleartext storage in a file or on disk
- CVE-2024-49762 — Pterodactyl Panel has plain-text logging of user passwords when two-factor authentication is disabled
- CVE-2026-6796 — Sanluan PublicCMS Failed Login LoginAdminController.java log_login cleartext storage in file
- CVE-2026-6598 — langflow-ai langflow Project Creation Endpoint projects.py encrypt_auth_settings cleartext storage in file
- CVE-2025-6748 — Bharti Airtel Thanks App files cleartext storage in a file or on disk
- CVE-2025-2120 — Thinkware Car Dashcam F800 Pro Configuration File hostapd.conf cleartext storage in a file or on disk
- CVE-2025-5098 — KL-001-2025-003: Mobile Dynamix PrinterShare Mobile Print Gmail Oauth Token Disclosure
Recently published
- CVE-2026-14663 — PostgreSQL pgcrypto, for OpenSSL-disabled ciphers, silently encrypts to and decrypts from cleartext
- CVE-2026-8804 — Cleartext Storage of Sensitive Information for Puppet Resource API
- CVE-2026-52783 — OpenProject: Information Disclosure (cleartext storage of data) on localhost through memcached via Others "storage.<id>.httpx_access_token" leads to Sensitive Data Exposure
- CVE-2026-24349 — A vulnerability has been identified in SIMATIC WinCC Unified PC Runtime V16 (All versions), SIMATIC WinCC Unified PC Run
- CVE-2025-4397 — Medtronic MyCareLink Patient Monitor Data Encryption Weakness
- CVE-2026-6796 — Sanluan PublicCMS Failed Login LoginAdminController.java log_login cleartext storage in file
- CVE-2026-6598 — langflow-ai langflow Project Creation Endpoint projects.py encrypt_auth_settings cleartext storage in file
- CVE-2026-5531 — SourceCodester Student Result Management System HTTP GET Request login_credentials.txt cleartext storage in file
- CVE-2025-64305 — Columbia Weather Systems MicroServer Cleartext Storage in a File or on Disk
- CVE-2025-36154 — IBM Concert Software Cleartext Storage in a File or on Disk.
- CVE-2025-6748 — Bharti Airtel Thanks App files cleartext storage in a file or on disk
- CVE-2025-5154 — PhonePe App SQLite Database databases cleartext storage in a file or on disk
- CVE-2025-5098 — KL-001-2025-003: Mobile Dynamix PrinterShare Mobile Print Gmail Oauth Token Disclosure
- CVE-2025-2120 — Thinkware Car Dashcam F800 Pro Configuration File hostapd.conf cleartext storage in a file or on disk
- CVE-2024-49762 — Pterodactyl Panel has plain-text logging of user passwords when two-factor authentication is disabled
- CVE-2024-20448 — Cisco Nexus Dashboard Fabric Controller Credential Information Disclosure Vulnerability
- CVE-2024-9040 — code-projects Blood Bank Management System Password cleartext storage in a file or on disk
- CVE-2024-5916 — PAN-OS: Cleartext Exposure of External System Secrets
- CVE-2024-38280 — Cleartext Storage in a File or on Disk in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)