Home Assistant token secrets in cleartext
Token secrets remain unexpired after password changes and are stored in cleartext.
Stories per day · 30 days
4 RSS
4 stories, newest first · one card per story
Stories tagged #cleartext
CVE-2026-103878: Apache Directory LDAP API: Injection of plaintext responses during StartTLS
Apache Directory LDAP API versions before 2.1.9 can leak plaintext responses when StartTLS follows a search.
Johnson Controls EasyIO Neo Series EC and CW Controllers
CISA says Johnson Controls EasyIO Neo controllers transmit credentials in cleartext via CVE-2026-64893, with no known exploitation.
7
Radicle: Disclosure of Vulnerability in the Network Protocol
Radicle disclosed unencrypted node traffic and broken peer authentication affecting every released version.