CWE-1428— Reliance on HTTP instead of HTTPS
The product provides or relies on use of HTTP communications when HTTPS is available.— MITRE CWE catalog
5 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-1428page 1 of 1
- CVE-2026-120422HIGHCVSS 8.9EG 8.92026-11-04
Sogou Input Method for Windows contains a vulnerability in the configuration retrieval mechanism of its SGTool.exe component. The application retrieves configuration data over unencrypted HTTP connections, allowing an attacker capable of m…
- CVE-2026-40677HIGHCVSS 7.7EG 7.72026-06-12
The use of insecure HTTP transport within AMD optional tools could allow an attacker to conduct a man-in-the-middle attack, potentially leading to arbitrary code execution.
- CVE-2026-10763HIGHCVSS 7.0EG 7.02026-06-30
PROMOD V is using insecure HTTP communication instead of HTTPS. The vulnerability is due to the lack of HTTPS support from 3rd party Digipede server.
- CVE-2026-82933MEDIUMCVSS 6.0EG 6.02026-09-28
mH-DEVELOPER smart home module sends its web interface and API traffic over unencrypted HTTP. Passwords, authentication tokens, and device commands are transmitted in cleartext. An attacker on the same network can intercept this traffic, s…
- CVE-2026-110970LOWCVSS 2.3EG 2.32026-10-30
Płatnik uses HTTP protocol to download updates, libraries and support files. It allows an attacker to conduct a Man-In-The-Middle attack, obtain transmitted data and replace the original files with their own. This issue was fixed�…
Map vulnerabilities like CWE-1428 to your infrastructure
EchelonGraph correlates every CVE — across CWE-1428 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →