# Information disclosure.

Sensitive data exposed to people who shouldn’t see it. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Spring Framework Request Headers Included in Exception Reasons in HandshakeWebsocketService](https://agentprime.io/advisories/CVE-2026-47893.md)
  `CVE-2026-47893` · CVE record: Spring Spring Framework · CVSS 7.5 High · Not analysed yet · Published 27 Aug 2026 · Tags: Information disclosure
- [Admin password disclosed in BrokerNotAliveException message](https://agentprime.io/advisories/CVE-2026-59271.md)
  `CVE-2026-59271` · CVE record: Spring Spring AMQP · CVSS 5.3 Medium · Not analysed yet · Published 27 Aug 2026 · Tags: Information disclosure
- [Absolute Path Disclosure in /vfm-admin/assets/zipstream/grandt/relativepath/RelativePath.Example1.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to know in which system dir…](https://agentprime.io/advisories/CVE-2026-37069.md)
  `CVE-2026-37069` · CVE record · CVSS 5.3 Medium · Not analysed yet · Published 27 Aug 2026 · Tags: Information disclosure
- [Veno File Manager Project 4.4.9 is vulnerable to Arbitrary File Deletion in /vfm-admin/index.php?section=translations&action=update&remove=.](https://agentprime.io/advisories/CVE-2026-37065.md)
  `CVE-2026-37065` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Information disclosure
- [User enumeration in /vfm-admin/ajax/usr-check.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to enumerate the application users via sending a specially crafted POST request…](https://agentprime.io/advisories/CVE-2026-37064.md)
  `CVE-2026-37064` · CVE record · CVSS 5.3 Medium · Not analysed yet · Published 27 Aug 2026 · Tags: Information disclosure
- [An issue in EcoOnline EHS (com.airsweb.v10) application for Android, version 0.2.499 allows a remote attacker to obtain sensitive information and execute arbitrary code via the AndroidManifest.xml co…](https://agentprime.io/advisories/CVE-2026-26897.md)
  `CVE-2026-26897` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Information disclosure
- [HCL BigFix Quantum Risk Analyzer is affected by logging sensitive information](https://agentprime.io/advisories/CVE-2026-21808.md)
  `CVE-2026-21808` · CVE record: HCLSoftware BigFix Quantum Risk Analyzer · CVSS 4.1 Medium · Not analysed yet · Published 26 Aug 2026 · Tags: Information disclosure
- [Sensitive information in log files in Veeam Backup and Replication](https://agentprime.io/advisories/CVE-2026-58070.md)
  `CVE-2026-58070` · CVE record: Veeam Backup and Replication · CVSS 6.8 Medium · Not analysed yet · Published 26 Aug 2026 · Tags: Information disclosure
- [HCL BigFix Quantum Risk Analyzer is affected by generating error messages with sensitive information](https://agentprime.io/advisories/CVE-2026-21809.md)
  `CVE-2026-21809` · CVE record: HCLSoftware BigFix Quantum Risk Analyzer · CVSS 3.9 Low · Not analysed yet · Published 26 Aug 2026 · Tags: Information disclosure
- [Weblate: Object-scoped RSS feeds disclose private change history to unauthorized users](https://agentprime.io/advisories/CVE-2026-77507.md)
  `CVE-2026-77507` · CVE record: WeblateOrg weblate · CVSS 5.3 Medium · Not analysed yet · Published 26 Aug 2026 · Tags: Information disclosure, Broken access control
- [Weblate: Restricted-component change history leaked to non-member project users through the nested \`GET /api/projects/{slug}/changes/\` endpoint](https://agentprime.io/advisories/CVE-2026-62249.md)
  `CVE-2026-62249` · CVE record: WeblateOrg weblate · CVSS 4.3 Medium · Not analysed yet · Published 26 Aug 2026 · Tags: Information disclosure, Broken access control
- [Starlette-Admin's unvalidated \`order_by\` parameter allows ordering by hidden columns (info-exposure oracle) and HTTP 500 DoS](https://agentprime.io/advisories/GHSA-6753-gr46-6wpr.md)
  `GHSA-6753-gr46-6wpr`, `CVE-2026-54553`, `PYSEC-2026-3924` · PyPI `starlette-admin`: affected `<0.16.1`, fixed in `0.16.1` · CVSS 5.4 Medium · Not analysed yet · Published 26 Aug 2026 · Tags: Information disclosure, Broken access control, CWE-248, CWE-602
- [Noptin < 4.3.3 - Unauthenticated Subscriber PII and confirm_key Disclosure via Actions Page](https://agentprime.io/advisories/CVE-2026-78146.md)
  `CVE-2026-78146` · CVE record: Unknown Simple Newsletter Plugin · CVSS 6.5 Medium · Not analysed yet · Published 26 Aug 2026 · Tags: Information disclosure
- [Stripe Payment Forms by WP Full Pay < 8.5.1 - Unauthenticated Customer Portal Subscription and Billing Data Disclosure via Unconfirmed Session](https://agentprime.io/advisories/CVE-2026-77758.md)
  `CVE-2026-77758` · CVE record: Unknown Stripe Payment Forms by WP Full Pay · CVSS 5.3 Medium · Not analysed yet · Published 26 Aug 2026 · Tags: Information disclosure
- [Kirki < 6.0.14 - Unauthenticated User and Comment Author Email Disclosure via kirki_get_apis](https://agentprime.io/advisories/CVE-2026-77754.md)
  `CVE-2026-77754` · CVE record: Unknown Kirki · CVSS 5.3 Medium · Not analysed yet · Published 26 Aug 2026 · Tags: Information disclosure
- [DocSys V2.02.80 is vulnerable to Any File Download.](https://agentprime.io/advisories/CVE-2026-75413.md)
  `CVE-2026-75413` · CVE record · CVSS 7.5 High · Not analysed yet · Published 26 Aug 2026 · Tags: Information disclosure
- [Cohere North AI v1.1.5 was discovered to contain an information leak via the WebSocket Endpoint.](https://agentprime.io/advisories/CVE-2025-61164.md)
  `CVE-2025-61164` · CVE record · CVSS 7.5 High · Not analysed yet · Published 26 Aug 2026 · Tags: Information disclosure
- [Kimai before 2.64.0 Missing Authorization via ProjectViewController export](https://agentprime.io/advisories/CVE-2026-80194.md)
  `CVE-2026-80194` · CVE record: kimai kimai · CVSS 8.7 High · Not analysed yet · Published 25 Aug 2026 · Tags: Information disclosure
- [TypeBot: Arbitrary server file read via Send Email block attachment path](https://agentprime.io/advisories/CVE-2026-62865.md)
  `CVE-2026-62865` · CVE record: baptisteArno typebot.io · CVSS 8.7 High · Not analysed yet · Published 25 Aug 2026 · Tags: Path traversal, Information disclosure
- [GitHub CLI: \`gh codespace ports forward\` exposes forwarded services on all network interfaces by default](https://agentprime.io/advisories/CVE-2026-72924.md)
  `CVE-2026-72924` · CVE record: cli cli · CVSS 2.1 Low · Not analysed yet · Published 25 Aug 2026 · Tags: Information disclosure, CWE-1327
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-78957.md)
  `CVE-2026-78957` · CVE record: Google Chrome · CVSS 5.5 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-78981.md)
  `CVE-2026-78981` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-79207.md)
  `CVE-2026-79207` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-79125.md)
  `CVE-2026-79125` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-79246.md)
  `CVE-2026-79246` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-79018.md)
  `CVE-2026-79018` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-78896.md)
  `CVE-2026-78896` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-79147.md)
  `CVE-2026-79147` · CVE record: Google Chrome · CVSS 5.3 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Information disclosure
- [Observable discrepancy in Google Chrome](https://agentprime.io/advisories/CVE-2026-79181.md)
  `CVE-2026-79181` · CVE record: Google Chrome · CVSS 5.3 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-79001.md)
  `CVE-2026-79001` · CVE record: Google Chrome · CVSS 5.3 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-79124.md)
  `CVE-2026-79124` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-79055.md)
  `CVE-2026-79055` · CVE record: Google Chrome · CVSS 5.1 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-79185.md)
  `CVE-2026-79185` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-78960.md)
  `CVE-2026-78960` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-79075.md)
  `CVE-2026-79075` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-79034.md)
  `CVE-2026-79034` · CVE record: Google Chrome · CVSS 3.1 Low · Not analysed yet · Published 25 Aug 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-79252.md)
  `CVE-2026-79252` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-79220.md)
  `CVE-2026-79220` · CVE record: Google Chrome · CVSS 5.3 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Information disclosure
- [Resource exposure in Google Chrome](https://agentprime.io/advisories/CVE-2026-79068.md)
  `CVE-2026-79068` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-79059.md)
  `CVE-2026-79059` · CVE record: Google Chrome · CVSS 3.1 Low · Not analysed yet · Published 25 Aug 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-79291.md)
  `CVE-2026-79291` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Information disclosure
- [Observable discrepancy in Google Chrome](https://agentprime.io/advisories/CVE-2026-78949.md)
  `CVE-2026-78949` · CVE record: Google Chrome · CVSS 2.9 Low · Not analysed yet · Published 25 Aug 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-79146.md)
  `CVE-2026-79146` · CVE record: Google Chrome · CVSS 5.5 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-79293.md)
  `CVE-2026-79293` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Information disclosure
- [Observable discrepancy in Google Chrome](https://agentprime.io/advisories/CVE-2026-79242.md)
  `CVE-2026-79242` · CVE record: Google Chrome · CVSS 5.3 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-79193.md)
  `CVE-2026-79193` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-79024.md)
  `CVE-2026-79024` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Information disclosure
- [Observable discrepancy in Google Chrome](https://agentprime.io/advisories/CVE-2026-79287.md)
  `CVE-2026-79287` · CVE record: Google Chrome · CVSS 5.3 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Information disclosure
- [Observable discrepancy in Google Chrome](https://agentprime.io/advisories/CVE-2026-78936.md)
  `CVE-2026-78936` · CVE record: Google Chrome · CVSS 2.9 Low · Not analysed yet · Published 25 Aug 2026 · Tags: Information disclosure
- [Observable discrepancy in Google Chrome](https://agentprime.io/advisories/CVE-2026-78955.md)
  `CVE-2026-78955` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-79074.md)
  `CVE-2026-79074` · CVE record: Google Chrome · CVSS 5.3 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-79122.md)
  `CVE-2026-79122` · CVE record: Google Chrome · CVSS 5.9 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Information disclosure
- [Resource exposure in Google Chrome](https://agentprime.io/advisories/CVE-2026-79031.md)
  `CVE-2026-79031` · CVE record: Google Chrome · CVSS 3.1 Low · Not analysed yet · Published 25 Aug 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-79095.md)
  `CVE-2026-79095` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-79144.md)
  `CVE-2026-79144` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-79271.md)
  `CVE-2026-79271` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-78987.md)
  `CVE-2026-78987` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Information disclosure
- [Observable discrepancy in Google Chrome](https://agentprime.io/advisories/CVE-2026-79028.md)
  `CVE-2026-79028` · CVE record: Google Chrome · CVSS 5.3 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-78941.md)
  `CVE-2026-78941` · CVE record: Google Chrome · CVSS 3.1 Low · Not analysed yet · Published 25 Aug 2026 · Tags: Information disclosure
- [Observable discrepancy in Google Chrome](https://agentprime.io/advisories/CVE-2026-79016.md)
  `CVE-2026-79016` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Information disclosure

Newest: <https://agentprime.io/advisories/tag/info-disclosure.md>
Older: <https://agentprime.io/advisories/tag/info-disclosure.md?cursor=WyIyMDI2LTA4LTI1VDIwOjEwOjE0LjU1MDAwMFoiLCJDVkUtMjAyNi03OTAxNiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=info-disclosure&cursor=WyIyMDI2LTA4LTI3VDA2OjAwOjE4LjEwOTAwMFoiLCJDVkUtMjAyNi0xOTcxNSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/info-disclosure/?cursor=WyIyMDI2LTA4LTI3VDA2OjAwOjE4LjEwOTAwMFoiLCJDVkUtMjAyNi0xOTcxNSJd>. Everything for agents: <https://agentprime.io/llms.txt>.