# Information disclosure.

Sensitive data exposed to people who shouldn’t see it. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Sensitive information in log files in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-80124.md)
  `CVE-2026-80124` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure
- [Kirki 6.2.1 - 6.2.5 - Unauthenticated Non-Public Post Content Disclosure via 'kirki_data' Parameter](https://agentprime.io/advisories/CVE-2026-84222.md)
  `CVE-2026-84222` · CVE record: Unknown Kirki · CVSS 5.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure
- [SupportCandy 3.3.6 - 3.5.2 - Unauthenticated Ticket Content Disclosure via Auth Code Leak](https://agentprime.io/advisories/CVE-2026-81022.md)
  `CVE-2026-81022` · CVE record: Unknown SupportCandy · CVSS 5.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure
- [SupportCandy 3.2.9 - 3.5.2 - Unauthenticated Ticket Attachment Disclosure](https://agentprime.io/advisories/CVE-2026-81021.md)
  `CVE-2026-81021` · CVE record: Unknown SupportCandy · CVSS 5.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure
- [Payment Plugins for PayPal WooCommerce < 2.0.26 - Unauthenticated Customer PII Disclosure via order-pay](https://agentprime.io/advisories/CVE-2026-80340.md)
  `CVE-2026-80340` · CVE record: Unknown Payment Plugins for PayPal WooCommerce · CVSS 5.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure
- [Payment Plugins for Stripe WooCommerce < 4.0.12 - Unauthenticated Customer PII Disclosure via order-pay](https://agentprime.io/advisories/CVE-2026-80339.md)
  `CVE-2026-80339` · CVE record: Unknown Payment Plugins for Stripe WooCommerce · CVSS 5.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure
- [Loops & Logic < 4.3.0 - Unauthenticated User Data and Site Option Disclosure](https://agentprime.io/advisories/CVE-2026-16960.md)
  `CVE-2026-16960` · CVE record: Unknown Loops & Logic · CVSS 7.5 High · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure
- [Tanium addressed an information disclosure vulnerability in Tanium Server.](https://agentprime.io/advisories/CVE-2026-87032.md)
  `CVE-2026-87032` · CVE record: Tanium Tanium Server · CVSS 4.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure
- [Tanium addressed an information disclosure vulnerability in Comply.](https://agentprime.io/advisories/CVE-2026-87035.md)
  `CVE-2026-87035` · CVE record: Tanium Comply · CVSS 4.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-87593.md)
  `CVE-2026-87593` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-87437.md)
  `CVE-2026-87437` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-87477.md)
  `CVE-2026-87477` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-87461.md)
  `CVE-2026-87461` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-87490.md)
  `CVE-2026-87490` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-87565.md)
  `CVE-2026-87565` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-87545.md)
  `CVE-2026-87545` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure
- [Observable discrepancy in Google Chrome](https://agentprime.io/advisories/CVE-2026-87459.md)
  `CVE-2026-87459` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure
- [Observable discrepancy in Google Chrome](https://agentprime.io/advisories/CVE-2026-87620.md)
  `CVE-2026-87620` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure
- [Observable discrepancy in Google Chrome](https://agentprime.io/advisories/CVE-2026-87619.md)
  `CVE-2026-87619` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure
- [Observable discrepancy in Google Chrome](https://agentprime.io/advisories/CVE-2026-87566.md)
  `CVE-2026-87566` · CVE record: Google Chrome · CVSS 5.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure
- [Observable discrepancy in Google Chrome](https://agentprime.io/advisories/CVE-2026-87623.md)
  `CVE-2026-87623` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-87531.md)
  `CVE-2026-87531` · CVE record: Google Chrome · CVSS 3.1 Low · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-87435.md)
  `CVE-2026-87435` · CVE record: Google Chrome · CVSS 5.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-87454.md)
  `CVE-2026-87454` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure
- [Observable discrepancy in Google Chrome](https://agentprime.io/advisories/CVE-2026-87518.md)
  `CVE-2026-87518` · CVE record: Google Chrome · CVSS 5.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-87439.md)
  `CVE-2026-87439` · CVE record: Google Chrome · CVSS 5.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-87451.md)
  `CVE-2026-87451` · CVE record: Google Chrome · CVSS 3.1 Low · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-87541.md)
  `CVE-2026-87541` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-87495.md)
  `CVE-2026-87495` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-87574.md)
  `CVE-2026-87574` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure
- [Observable discrepancy in Google Chrome](https://agentprime.io/advisories/CVE-2026-87516.md)
  `CVE-2026-87516` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure
- [Observable discrepancy in Google Chrome](https://agentprime.io/advisories/CVE-2026-87539.md)
  `CVE-2026-87539` · CVE record: Google Chrome · CVSS 3.1 Low · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-87521.md)
  `CVE-2026-87521` · CVE record: Google Chrome · CVSS 3.1 Low · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-87658.md)
  `CVE-2026-87658` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure
- [Observable discrepancy in Google Chrome](https://agentprime.io/advisories/CVE-2026-87478.md)
  `CVE-2026-87478` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure
- [Information disclosure in the blogComments GraphQL query in Magefan Blog GraphQL for Magento 2 (magefan/module-blog-graph-ql) through 2.2.1 allows remote unauthenticated attackers to obtain blog comm…](https://agentprime.io/advisories/CVE-2026-79323.md)
  `CVE-2026-79323` · CVE record · CVSS 7.5 High · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure
- [An issue was discovered in Cyrus IMAP before 3.12.4.](https://agentprime.io/advisories/CVE-2026-61911.md)
  `CVE-2026-61911` · CVE record: cyrusimap Cyrus IMAP · CVSS 4.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure
- [An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the inetd service spawns /app/sh_for_telnet](https://agentprime.io/advisories/CVE-2026-52482.md)
  `CVE-2026-52482` · CVE record · CVSS 7.5 High · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure
- [Maravel-Framework Vulnerable to Side-Channel Information Disclosure (Error Oracle) via Dynamic Route Fuzzing](https://agentprime.io/advisories/CVE-2026-53933.md)
  `CVE-2026-53933` · CVE record: macropay-solutions maravel-framework · CVSS 6.9 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Information disclosure
- [Improper Restriction of Sensitive Information in Okta Hyperdrive Agent Logging](https://agentprime.io/advisories/CVE-2026-78631.md)
  `CVE-2026-78631` · CVE record: Okta Okta Hyperdrive Agent · CVSS 5.3 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Information disclosure
- [Improper Credential Protection in Okta Hyperdrive Integration Installer Logging](https://agentprime.io/advisories/CVE-2026-78627.md)
  `CVE-2026-78627` · CVE record: Okta Okta Hyperdrive Integration Plugin · CVSS 7.3 High · Not analysed yet · Published 8 Sept 2026 · Tags: Information disclosure
- [Information disclosure in Eclipse Foundation Eclipse aeriOS](https://agentprime.io/advisories/CVE-2026-86464.md)
  `CVE-2026-86464` · CVE record: Eclipse Foundation Eclipse aeriOS · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Information disclosure, Authentication bypass, Hard-coded credentials, CWE-1188
- [GitPython: TagReference.create positional reference bypasses kwargs-only --file guard, enabling arbitrary file read (incomplete fix of 3af0c251)](https://agentprime.io/advisories/GHSA-3wxw-xv34-2frg.md)
  `GHSA-3wxw-xv34-2frg`, `CVE-2026-78679`, `PYSEC-2026-3837` · PyPI `gitpython`: affected `<3.1.59`, fixed in `3.1.59` · CVSS 7.1 High · Not analysed yet · Published 8 Sept 2026 · Tags: Path traversal, Command injection, Information disclosure
- [GitPython: Incomplete unsafe_git_revision_options denylist omits --contents/-S, enabling arbitrary file read via Repo.blame()](https://agentprime.io/advisories/GHSA-5xxx-qhh7-9287.md)
  `GHSA-5xxx-qhh7-9287`, `CVE-2026-78678`, `PYSEC-2026-3788` · PyPI `gitpython`: affected `<3.1.59`, fixed in `3.1.59` · CVSS 7.1 High · Not analysed yet · Published 8 Sept 2026 · Tags: Command injection, Information disclosure
- [GitPython: Arbitrary local file content disclosure via \[include\] directive in untrusted .gitmodules (SubmoduleConfigParser never disables merge_includes)](https://agentprime.io/advisories/GHSA-7833-fr7j-v32q.md)
  `GHSA-7833-fr7j-v32q`, `CVE-2026-78675`, `PYSEC-2026-3785` · PyPI `gitpython`: affected `<3.1.59`, fixed in `3.1.59` · CVSS 8.6 High · Not analysed yet · Published 8 Sept 2026 · Tags: Path traversal, Information disclosure
- [Skype for Business Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-66306.md)
  `CVE-2026-66306` · CVE record: Microsoft Skype for Business Server 2015 CU13 and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Information disclosure
- [ningzichun Student Management System Backup example.7z information disclosure](https://agentprime.io/advisories/CVE-2026-86672.md)
  `CVE-2026-86672` · CVE record: ningzichun Student Management System · CVSS 6.9 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Information disclosure, Broken access control
- [.NET Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69806.md)
  `CVE-2026-69806` · CVE record: Microsoft .NET 10.0 runtime and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Sept 2026 · Tags: Code injection, Information disclosure
- [Microsoft Excel Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-81394.md)
  `CVE-2026-81394` · CVE record: Microsoft Microsoft 365 Apps for Enterprise and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Information disclosure
- [Microsoft Excel Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-81387.md)
  `CVE-2026-81387` · CVE record: Microsoft Microsoft 365 Apps for Enterprise and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Information disclosure
- [Windows Biometric Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-73008.md)
  `CVE-2026-73008` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Information disclosure
- [Microsoft Teams for Android Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-65812.md)
  `CVE-2026-65812` · CVE record: Microsoft Microsoft Teams for Android · CVSS 6.8 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Information disclosure
- [.NET Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69805.md)
  `CVE-2026-69805` · CVE record: Microsoft Microsoft Visual Studio 2022 version 17.14 and 2 more · CVSS 7.5 High · Not analysed yet · Published 8 Sept 2026 · Tags: Path traversal, Information disclosure, Hard-coded credentials
- [Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-69351.md)
  `CVE-2026-69351` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Information disclosure
- [Windows License Manager Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-69315.md)
  `CVE-2026-69315` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Information disclosure
- [Microsoft COM for Windows Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-69294.md)
  `CVE-2026-69294` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Information disclosure
- [Windows Network Connection Broker Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-68886.md)
  `CVE-2026-68886` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Information disclosure, Memory corruption
- [Windows Program Compatibility Assistant Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-68873.md)
  `CVE-2026-68873` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Information disclosure, Memory corruption
- [Microsoft Account Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-68852.md)
  `CVE-2026-68852` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Information disclosure, Memory corruption
- [Windows MIDI Service Module Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-68842.md)
  `CVE-2026-68842` · CVE record: Microsoft Windows 11 Version 24H2 and 2 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Information disclosure

Newest: <https://agentprime.io/advisories/tag/info-disclosure.md>
Older: <https://agentprime.io/advisories/tag/info-disclosure.md?cursor=WyIyMDI2LTA5LTA4VDE3OjE0OjQzLjY2MDAwMFoiLCJDVkUtMjAyNi02ODg0MiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=info-disclosure&cursor=WyIyMDI2LTA5LTA5VDA4OjE0OjI3LjczODAwMFoiLCJDVkUtMjAyNi04MDE3NSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/info-disclosure/?cursor=WyIyMDI2LTA5LTA5VDA4OjE0OjI3LjczODAwMFoiLCJDVkUtMjAyNi04MDE3NSJd>. Everything for agents: <https://agentprime.io/llms.txt>.