CVE-2021-40650Medium· 6.5▾ SunlitIn Connx Version 6.2.0.1269 (20210623), a cookie can be issued by the application and not have the secure flag set.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0.2 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 29.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.7%
0.7% → 0.8%
In Connx Version 6.2.0.1269 (20210623), a cookie can be issued by the application and not have the secure flag set.
connx = 6.2.0.1269Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2021-40649Medium· 6.5In Connx Version 6.2.0.1269 (20210623), a cookie can be issued by the application and not have the HttpOnly flag set.
CVE-2026-116198Medium· 4.3Snipe-IT before 8.7.0 Missing Encryption via Api AssetsController store
CVE-2026-115247Medium· 4.3subhajitkhan online-clinic-management-system patientregistration.php missing encryption
CVE-2026-111063Medium· 6.3AIOHTTP: Secure attribute not enforced for shared cookie
CVE-2026-86375Medium· 6.2Dell Application Installer, versions prior to 26.09.0.1, contain a Missing Encryption of Sensitive Data vulnerability
CVE-2026-80806Medium· 4.7kernel: ext4: don't enable DAX on new encrypted files (CVE-2026-80806)