# Information disclosure.

Sensitive data exposed to people who shouldn’t see it. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Windows Defender Firewall Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-68831.md)
  `CVE-2026-68831` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Information disclosure
- [Microsoft SQL Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-67383.md)
  `CVE-2026-67383` · CVE record: Microsoft Microsoft SQL Server 2025 (CU8) and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Information disclosure
- [Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-71330.md)
  `CVE-2026-71330` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Sept 2026 · Tags: Information disclosure
- [Win32k Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-69832.md)
  `CVE-2026-69832` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.6 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Information disclosure
- [Windows Wireless Wide Area Network Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-69862.md)
  `CVE-2026-69862` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption, Information disclosure
- [Windows Kernel Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-69723.md)
  `CVE-2026-69723` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.7 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Information disclosure
- [Windows Error Reporting Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-69684.md)
  `CVE-2026-69684` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Information disclosure
- [Windows Print Spooler Components Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-69552.md)
  `CVE-2026-69552` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.7 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Information disclosure
- [Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability](https://agentprime.io/advisories/CVE-2026-69549.md)
  `CVE-2026-69549` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption, Information disclosure
- [Microsoft Windows Search Component Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-69507.md)
  `CVE-2026-69507` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 5.7 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Information disclosure
- [Windows Kernel Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-69406.md)
  `CVE-2026-69406` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Information disclosure
- [Windows MIDI Service Module Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-69339.md)
  `CVE-2026-69339` · CVE record: Microsoft Windows 11 Version 24H2 and 2 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Information disclosure
- [Unauthenticated Account Information Disclosure in Multiple Omada Controllers](https://agentprime.io/advisories/CVE-2026-81531.md)
  `CVE-2026-81531` · CVE record: TP-Link System Inc. Omada Software Controller and 4 more · CVSS 6.9 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Information disclosure
- [Mali GPU Kernel Driver allows access to sensitive kernel information](https://agentprime.io/advisories/CVE-2026-0860.md)
  `CVE-2026-0860` · CVE record: Arm Ltd Valhall GPU Kernel Driver and 1 more · CVSS 7.5 High · Not analysed yet · Published 8 Sept 2026 · Tags: Information disclosure
- [Duplicate Advisory: Sensitive information written to logs by Snowflake drivers](https://agentprime.io/advisories/GHSA-5cwm-p7pj-gqp2.md)
  `GHSA-5cwm-p7pj-gqp2` · npm `snowflake-sdk`: affected `*`, no fixed version yet · CVSS 6.5 Medium · Withdrawn · Not analysed yet · Published 8 Sept 2026 · Tags: Information disclosure
- [TYPO3-CORE-SA-2026-022: Information Disclosure via Backend Localization Wizard](https://agentprime.io/advisories/PKSA-745m-816f-bzfy.md)
  `PKSA-745m-816f-bzfy`, `CVE-2026-77132` · Packagist `typo3/cms-backend`: affected `>=10.0.0, <10.4.60 || >=11.0.0, <11.5.54 || >=12.0.0, <12.4.49 || >=13.0.0, <13.4.35 || >=14.0.0, <14.3.7`, fixed in `10.4.60`, `11.5.54`, `12.4.49`, `13.4.35`, `14.3.7` · CVSS 5.3 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Information disclosure, Broken access control
- [code-projects Student Crud Operation Backup File card_activation.sql information disclosure](https://agentprime.io/advisories/CVE-2026-86519.md)
  `CVE-2026-86519` · CVE record: code-projects Student Crud Operation · CVSS 6.9 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Information disclosure, Broken access control
- [ASUS Armoury Crate: Exposure of Sensitive System Information to an Unauthorized Control Sphere in Armoury…](https://agentprime.io/advisories/CVE-2026-16006.md)
  `CVE-2026-16006` · CVE record: ASUS Armoury Crate · CVSS 5.7 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Information disclosure
- [Information Disclosure vulnerability in SAP Web Dispatcher, Internet Communication Manager and SAP Content Server](https://agentprime.io/advisories/CVE-2026-76968.md)
  `CVE-2026-76968` · CVE record: SAP_SE SAP Web Dispatcher, Internet Communication Manager and SAP Content Server · CVSS 6.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Information disclosure
- [Information disclosure in JetBrains IntelliJ IDEA](https://agentprime.io/advisories/CVE-2026-86505.md)
  `CVE-2026-86505` · CVE record: JetBrains IntelliJ IDEA · CVSS 3.3 Low · Not analysed yet · Published 7 Sept 2026 · Tags: Information disclosure
- [Sensitive information in log files in JetBrains IntelliJ IDEA](https://agentprime.io/advisories/CVE-2026-86501.md)
  `CVE-2026-86501` · CVE record: JetBrains IntelliJ IDEA · CVSS 2.8 Low · Not analysed yet · Published 7 Sept 2026 · Tags: Information disclosure
- [Information disclosure in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2026-86497.md)
  `CVE-2026-86497` · CVE record: JetBrains YouTrack · CVSS 6.8 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Information disclosure
- [Cleartext storage of sensitive information in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-80058.md)
  `CVE-2026-80058` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Information disclosure
- [Sensitive information in log files in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-80056.md)
  `CVE-2026-80056` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Information disclosure
- [light0011 cms Debug Mode config.php information disclosure](https://agentprime.io/advisories/CVE-2026-86308.md)
  `CVE-2026-86308` · CVE record: light0011 cms · CVSS 6.9 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Information disclosure, Broken access control
- [MISP Dashboard Organisation Widgets Bypass Organisation-Index Restrictions and Expose Hidden Organisation Data](https://agentprime.io/advisories/CVE-2026-86441.md)
  `CVE-2026-86441` · CVE record: MISP MISP · CVSS 2.3 Low · Not analysed yet · Published 7 Sept 2026 · Tags: Information disclosure, Broken access control
- [MISP Insufficient Outbound URL Validation Allows SSRF and Credential Disclosure via Feed Redirects and TAXII Discovery](https://agentprime.io/advisories/CVE-2026-86419.md)
  `CVE-2026-86419` · CVE record: MISP MISP · CVSS 7.0 High · Not analysed yet · Published 7 Sept 2026 · Tags: Information disclosure, Server-side request forgery (SSRF)
- [MISP Dashboard Organisation Picker Exposes Hidden Organisation Metadata to Unauthorized Users](https://agentprime.io/advisories/CVE-2026-86418.md)
  `CVE-2026-86418` · CVE record: MISP MISP · CVSS 2.3 Low · Not analysed yet · Published 7 Sept 2026 · Tags: Information disclosure, Broken access control
- [MISP Dashboard Template REST API Exposes Template Owner Email Addresses to Unauthorized Users](https://agentprime.io/advisories/CVE-2026-86417.md)
  `CVE-2026-86417` · CVE record: MISP MISP · CVSS 5.3 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Information disclosure, Broken access control
- [code-projects Hospital Information System SQL Database Backup File his.sql information disclosure](https://agentprime.io/advisories/CVE-2026-86302.md)
  `CVE-2026-86302` · CVE record: code-projects Hospital Information System · CVSS 6.9 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Information disclosure, Broken access control
- [jaychouchannel Tourism-Management-System CommonController.java getOption information disclosure](https://agentprime.io/advisories/CVE-2026-86284.md)
  `CVE-2026-86284` · CVE record: jaychouchannel Tourism-Management-System · CVSS 6.9 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Information disclosure, Broken access control
- [SourceCodester Syllabus-Aligned Learning Management & Examination System cict_portal.sql cleartext storage](https://agentprime.io/advisories/CVE-2026-86280.md)
  `CVE-2026-86280` · CVE record: SourceCodester Syllabus-Aligned Learning Management & Examination System · CVSS 6.9 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Information disclosure, CWE-310
- [domain-scoped PSL domain cookie](https://agentprime.io/advisories/CVE-2026-82209.md)
  `CVE-2026-82209` · CVE record: curl curl · CVSS 8.2 High · Not analysed yet · Published 6 Sept 2026 · Tags: Information disclosure
- [secure cookie attribute bypass with tab](https://agentprime.io/advisories/CVE-2026-80255.md)
  `CVE-2026-80255` · CVE record: curl curl · CVSS 7.5 High · Not analysed yet · Published 6 Sept 2026 · Tags: Information disclosure
- [code-projects Hotel and Tourism Reservation in PHP Database Backup hotel_db%20(1).sql information disclosure](https://agentprime.io/advisories/CVE-2026-86217.md)
  `CVE-2026-86217` · CVE record: code-projects Hotel and Tourism Reservation in PHP · CVSS 6.9 Medium · Not analysed yet · Published 6 Sept 2026 · Tags: Information disclosure, Broken access control
- [code-projects Daily Expense Manager Database Backup exp_ak.sql information disclosure](https://agentprime.io/advisories/CVE-2026-86179.md)
  `CVE-2026-86179` · CVE record: code-projects Daily Expense Manager · CVSS 6.9 Medium · Not analysed yet · Published 6 Sept 2026 · Tags: Information disclosure, Broken access control
- [WWBN AVideo Broken Access Control via videoViewsInfo hash Parameter](https://agentprime.io/advisories/CVE-2026-86190.md)
  `CVE-2026-86190` · CVE record: WWBN AVideo · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Sept 2026 · Tags: Information disclosure
- [Arbitrary file read via workspace confinement bypass in local-operator /v1/chat/agents/{id}/edit](https://agentprime.io/advisories/GHSA-3xjw-9qpc-53mh.md)
  `GHSA-3xjw-9qpc-53mh`, `PYSEC-2026-4010` · PyPI `local-operator`: affected `<0.47.5`, fixed in `0.47.5` · CVSS 7.5 High · Not analysed yet · Published 5 Sept 2026 · Tags: Path traversal, Information disclosure
- [EmbedPress 4.6.0 - 4.6.3 - Contributor+ Administrator Email Disclosure via Google Reviews REST Route](https://agentprime.io/advisories/CVE-2026-84926.md)
  `CVE-2026-84926` · CVE record: Unknown EmbedPress · CVSS 2.7 Low · Not analysed yet · Published 5 Sept 2026 · Tags: Information disclosure
- [The Events Calendar \&lt; 6.17.3.1 - Contributor+ Non-Public Event, Venue and Organizer Content Disclosure via REST API](https://agentprime.io/advisories/CVE-2026-84745.md)
  `CVE-2026-84745` · CVE record: Unknown The Events Calendar · CVSS 2.7 Low · Not analysed yet · Published 5 Sept 2026 · Tags: Information disclosure
- [My Private Site < 4.2.3 - Unauthenticated Sensitive Information Exposure via RSS Feeds and Sitemap](https://agentprime.io/advisories/CVE-2026-81348.md)
  `CVE-2026-81348` · CVE record: Unknown My Private Site · CVSS 3.7 Low · Not analysed yet · Published 5 Sept 2026 · Tags: Information disclosure
- [Post Carousel 4.0.0 - 4.0.7 - Unauthenticated Password-Protected Post Content and post_password Disclosure via sp_handle_post_id](https://agentprime.io/advisories/CVE-2026-78149.md)
  `CVE-2026-78149` · CVE record: Unknown Smart Post · CVSS 5.3 Medium · Not analysed yet · Published 5 Sept 2026 · Tags: Information disclosure
- [JetFormBuilder < 3.6.5.2 - Unauthenticated Password Hash and Arbitrary Metadata Disclosure via Dynamic Preset](https://agentprime.io/advisories/CVE-2026-19858.md)
  `CVE-2026-19858` · CVE record: Unknown JetFormBuilder — Dynamic Blocks Form Builder · CVSS 7.5 High · Not analysed yet · Published 5 Sept 2026 · Tags: Information disclosure
- [vLLM: Unauthenticated Internal Path and Username Disclosure via Validation Error Messages](https://agentprime.io/advisories/GHSA-hwrm-c4cx-rf4j.md)
  `GHSA-hwrm-c4cx-rf4j`, `CVE-2026-73555`, `PYSEC-2026-3937` · PyPI `vllm`: affected `<0.26.0`, fixed in `0.26.0` · CVSS 5.3 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Information disclosure
- [PassMark PerformanceTest, BurnInTest, and OSForensics Physical Memory Disclosure via DirectIo64.sys IOCTL](https://agentprime.io/advisories/CVE-2026-80119.md)
  `CVE-2026-80119` · CVE record: PassMark Software PerformanceTest and 2 more · CVSS 8.5 High · Not analysed yet · Published 4 Sept 2026 · Tags: Path traversal, Information disclosure
- [PassMark PerformanceTest, BurnInTest, and OSForensics Kernel Null Pointer Dereference via DirectIo64.sys IOCTL](https://agentprime.io/advisories/CVE-2026-80118.md)
  `CVE-2026-80118` · CVE record: PassMark Software PerformanceTest and 2 more · CVSS 8.4 High · Not analysed yet · Published 4 Sept 2026 · Tags: Path traversal, Memory corruption, Information disclosure
- [CodeWhale: Argument Injection in \`git_blame\` Tool Allows Arbitrary File Read Without Approval](https://agentprime.io/advisories/GHSA-c6mw-8xh8-gpq6.md)
  `GHSA-c6mw-8xh8-gpq6`, `CVE-2026-75912` · crates.io `codewhale-tui` and 3 more: affected `>=0.8.41, <0.8.64`, fixed in `0.8.64` · CVSS 8.3 High · Not analysed yet · Published 4 Sept 2026 · Tags: Command injection, Information disclosure
- [CodeWhale: js_execution leaks parent environment to model context via missing env scrub](https://agentprime.io/advisories/GHSA-h539-c7r8-3xq4.md)
  `GHSA-h539-c7r8-3xq4`, `CVE-2026-75915` · crates.io `codewhale-tui` and 3 more: affected `>=0.8.41, <0.8.64`, fixed in `0.8.64` · CVSS 8.7 High · Not analysed yet · Published 4 Sept 2026 · Tags: Information disclosure, CWE-526
- [CodeWhale: Project config \`instructions\` override enables arbitrary file read into AI system prompt via cloned repository](https://agentprime.io/advisories/GHSA-62f5-cp2p-vq95.md)
  `GHSA-62f5-cp2p-vq95`, `CVE-2026-75859` · crates.io `codewhale-tui` and 3 more: affected `>=0.8.41, <0.8.64`, fixed in `0.8.64` · CVSS 8.7 High · Not analysed yet · Published 4 Sept 2026 · Tags: Path traversal, Information disclosure
- [IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs](https://agentprime.io/advisories/CVE-2026-16689.md)
  `CVE-2026-16689` · CVE record: IBM App Connect Enterprise and 1 more · CVSS 6.2 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Information disclosure
- [IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs](https://agentprime.io/advisories/CVE-2026-17442.md)
  `CVE-2026-17442` · CVE record: IBM App Connect Enterprise and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Information disclosure
- [IBM ContextForge MCP Gateway is affected by credential disclosure and privilege escalation via jq filter execution](https://agentprime.io/advisories/CVE-2026-18486.md)
  `CVE-2026-18486` · CVE record: IBM ContextForge MCP Gateway · CVSS 8.8 High · Not analysed yet · Published 4 Sept 2026 · Tags: Information disclosure
- [IBM i is Affected By Sensitive Information Exposure Vulnerability in PASE \[\]](https://agentprime.io/advisories/CVE-2026-18887.md)
  `CVE-2026-18887` · CVE record: IBM i · CVSS 6.5 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Information disclosure
- [Langflow is vulnerable to information disclosure due to cross-user MCP tool cache collision and incomplete secret scrubbing on public flows](https://agentprime.io/advisories/CVE-2026-19300.md)
  `CVE-2026-19300` · CVE record: IBM Langflow OSS · CVSS 7.5 High · Not analysed yet · Published 4 Sept 2026 · Tags: Information disclosure
- [IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs](https://agentprime.io/advisories/CVE-2026-19649.md)
  `CVE-2026-19649` · CVE record: IBM App Connect Enterprise and 1 more · CVSS 6.2 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Information disclosure
- [code-projects Vehicle Management System SQL Database Backup File vehicle_management.sql information disclosure](https://agentprime.io/advisories/CVE-2026-85517.md)
  `CVE-2026-85517` · CVE record: code-projects Vehicle Management System · CVSS 6.9 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Information disclosure, Broken access control
- [phpMyFAQ before 4.1.8 TOTP Secret Exposure via Data Export](https://agentprime.io/advisories/CVE-2026-85588.md)
  `CVE-2026-85588` · CVE record: thorsten phpMyFAQ · CVSS 5.3 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Information disclosure
- [Apache Allura: Information exposure via search](https://agentprime.io/advisories/CVE-2026-81270.md)
  `CVE-2026-81270` · CVE record: Apache Software Foundation Apache Allura · CVSS 7.5 High · Not analysed yet · Published 4 Sept 2026 · Tags: Information disclosure
- [Xing Inc. XING CPTrans-ME-X: XING CPTrans-ME-X contains an Exposure of Sensitive System Information to an Unauthorized…](https://agentprime.io/advisories/CVE-2026-66840.md)
  `CVE-2026-66840` · CVE record: Xing Inc. XING CPTrans-ME-X · CVSS 8.7 High · Not analysed yet · Published 4 Sept 2026 · Tags: Information disclosure
- [Xpro Elementor Addons < 1.7.8 - Unauthenticated Draft/Private Product Disclosure via Quick View](https://agentprime.io/advisories/CVE-2026-84146.md)
  `CVE-2026-84146` · CVE record: Unknown Xpro Addons — 140+ Widgets for Elementor · CVSS 5.3 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Information disclosure

Newest: <https://agentprime.io/advisories/tag/info-disclosure.md>
Older: <https://agentprime.io/advisories/tag/info-disclosure.md?cursor=WyIyMDI2LTA5LTA0VDA2OjAwOjA2LjY3OTAwMFoiLCJDVkUtMjAyNi04NDE0NiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=info-disclosure&cursor=WyIyMDI2LTA5LTA4VDE3OjE0OjQzLjY2MDAwMFoiLCJDVkUtMjAyNi02ODg0MiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/info-disclosure/?cursor=WyIyMDI2LTA5LTA4VDE3OjE0OjQzLjY2MDAwMFoiLCJDVkUtMjAyNi02ODg0MiJd>. Everything for agents: <https://agentprime.io/llms.txt>.