# Information disclosure.

Sensitive data exposed to people who shouldn’t see it. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Information disclosure in Oracle Corporation Oracle Agile PLM MCAD Connector](https://agentprime.io/advisories/CVE-2026-83279.md)
  `CVE-2026-83279` · CVE record: Oracle Corporation Oracle Agile PLM MCAD Connector · CVSS 5.5 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure
- [Information disclosure in Oracle Corporation Oracle Agile PLM MCAD Connector](https://agentprime.io/advisories/CVE-2026-83277.md)
  `CVE-2026-83277` · CVE record: Oracle Corporation Oracle Agile PLM MCAD Connector · CVSS 7.3 High · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure
- [Information disclosure in Oracle Corporation Oracle Agile PLM MCAD Connector](https://agentprime.io/advisories/CVE-2026-83274.md)
  `CVE-2026-83274` · CVE record: Oracle Corporation Oracle Agile PLM MCAD Connector · CVSS 5.5 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure
- [Information disclosure in Oracle Corporation Oracle Commerce Guided Search / Oracle Commerce Experience…](https://agentprime.io/advisories/CVE-2026-83259.md)
  `CVE-2026-83259` · CVE record: Oracle Corporation Oracle Commerce Guided Search / Oracle Commerce Experience Manager · CVSS 7.1 High · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure
- [Information disclosure in Oracle Corporation Oracle Commerce Guided Search / Oracle Commerce Experience…](https://agentprime.io/advisories/CVE-2026-83238.md)
  `CVE-2026-83238` · CVE record: Oracle Corporation Oracle Commerce Guided Search / Oracle Commerce Experience Manager · CVSS 7.1 High · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure
- [Information disclosure in Oracle Corporation Oracle Commerce Guided Search / Oracle Commerce Experience…](https://agentprime.io/advisories/CVE-2026-83237.md)
  `CVE-2026-83237` · CVE record: Oracle Corporation Oracle Commerce Guided Search / Oracle Commerce Experience Manager · CVSS 7.1 High · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure
- [Information disclosure in Oracle Corporation Oracle Application Object Library](https://agentprime.io/advisories/CVE-2026-83175.md)
  `CVE-2026-83175` · CVE record: Oracle Corporation Oracle Application Object Library · CVSS 6.5 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure
- [Information disclosure in Oracle Corporation Oracle Application Object Library](https://agentprime.io/advisories/CVE-2026-83167.md)
  `CVE-2026-83167` · CVE record: Oracle Corporation Oracle Application Object Library · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure
- [Information disclosure in Oracle Corporation Oracle Order Management](https://agentprime.io/advisories/CVE-2026-83116.md)
  `CVE-2026-83116` · CVE record: Oracle Corporation Oracle Order Management · CVSS 7.7 High · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure
- [Unauthenticated Information Disclosure in HPE Networking EdgeConnect SD-WAN Gateways](https://agentprime.io/advisories/CVE-2026-76707.md)
  `CVE-2026-76707` · CVE record: Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways · CVSS 4.3 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure
- [Unauthenticated Information Disclosure in EdgeConnect SD-WAN Orchestrator API allows exposure of sensitive data](https://agentprime.io/advisories/CVE-2026-76706.md)
  `CVE-2026-76706` · CVE record: Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways · CVSS 5.3 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure
- [Authenticated Information Disclosure in HPE Networking EdgeConnect Enterprise Web-Based Management Interface](https://agentprime.io/advisories/CVE-2026-76697.md)
  `CVE-2026-76697` · CVE record: Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways · CVSS 6.5 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure
- [Unauthenticated Adjacent Information Disclosure and Denial-of-Service Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways](https://agentprime.io/advisories/CVE-2026-76692.md)
  `CVE-2026-76692` · CVE record: Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways · CVSS 7.1 High · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure
- [Authenticated Sensitive Information Disclosure in HPE Networking EdgeConnect SD-WAN Orchestrator](https://agentprime.io/advisories/CVE-2026-76672.md)
  `CVE-2026-76672` · CVE record: Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure
- [Http4s: FollowRedirect middleware leaks credentials over https->http same-authority redirect](https://agentprime.io/advisories/CVE-2026-69212.md)
  `CVE-2026-69212` · CVE record: http4s http4s · CVSS 5.9 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure, Weak cryptography or TLS
- [On affected platforms running Arista EOS, under certain circumstances plaintext shared secrets for configured Terminal Access Controller Access-Control System Plus (TACACS+) servers](https://agentprime.io/advisories/CVE-2026-73467.md)
  `CVE-2026-73467` · CVE record: Arista Networks EOS · CVSS 6.0 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure
- [On affected platforms running Arista EOS, under certain circumstances plaintext user passwords](https://agentprime.io/advisories/CVE-2026-73466.md)
  `CVE-2026-73466` · CVE record: Arista Networks EOS · CVSS 6.0 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure
- [On affected platforms running Arista EOS, under certain circumstances plaintext private keys](https://agentprime.io/advisories/CVE-2026-73465.md)
  `CVE-2026-73465` · CVE record: Arista Networks EOS · CVSS 6.0 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure
- [Observable discrepancy in Google Android](https://agentprime.io/advisories/CVE-2026-56888.md)
  `CVE-2026-56888` · CVE record: Google Android · CVSS 6.2 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure
- [Information disclosure in Google Android](https://agentprime.io/advisories/CVE-2026-56882.md)
  `CVE-2026-56882` · CVE record: Google Android · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure
- [Information disclosure in Google Android](https://agentprime.io/advisories/CVE-2026-0197.md)
  `CVE-2026-0197` · CVE record: Google Android · CVSS 4.4 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure
- [Duplicate Advisory: Vikunja: Link-share token can enumerate users through the v2 API](https://agentprime.io/advisories/GHSA-vcgv-7rvm-m3vp.md)
  `GHSA-vcgv-7rvm-m3vp` · Go `code.vikunja.io/api`: affected `<=2.5.0`, no fixed version yet · CVSS 4.3 Medium · Withdrawn · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure
- [Duplicate Advisory: Vikunja: Read-only project members can obtain any link share's access hash via the single-share read endpoint (v1 and v2) and escalate to the share's permission level](https://agentprime.io/advisories/GHSA-37rx-7pj5-p885.md)
  `GHSA-37rx-7pj5-p885` · Go `code.vikunja.io/api`: affected `<=2.5.0`, no fixed version yet · CVSS 7.5 High · Withdrawn · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure
- [Duplicate Advisory: Vikunja: Any user can enumerate every team and its members by attaching arbitrary teams to a throwaway project](https://agentprime.io/advisories/GHSA-2922-qgfj-pr7v.md)
  `GHSA-2922-qgfj-pr7v` · Go `code.vikunja.io/api`: affected `<=2.5.0`, no fixed version yet · CVSS 4.3 Medium · Withdrawn · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure
- [Insertion of Sensitive Information Into Sent Data in GitLab](https://agentprime.io/advisories/CVE-2026-82837.md)
  `CVE-2026-82837` · CVE record: GitLab GitLab · CVSS 5.3 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure
- [Multiple authorization bypass in WordPress theme design-scuole-wordpress-theme](https://agentprime.io/advisories/CVE-2026-87792.md)
  `CVE-2026-87792` · CVE record: Developers Italia design-scuole-wordpress-theme · CVSS 8.7 High · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure, Broken access control
- [WWBN AVideo through 29.0 Broken Access Control via Live Endpoints](https://agentprime.io/advisories/CVE-2026-91965.md)
  `CVE-2026-91965` · CVE record: WWBN AVideo · CVSS 8.7 High · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure
- [Information disclosure in the Networking component](https://agentprime.io/advisories/CVE-2026-92070.md)
  `CVE-2026-92070` · CVE record: Mozilla Firefox and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure
- [Information disclosure in the Networking: HTTP component](https://agentprime.io/advisories/CVE-2026-92044.md)
  `CVE-2026-92044` · CVE record: Mozilla Firefox and 1 more · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure
- [Information disclosure in the Graphics: ImageLib component](https://agentprime.io/advisories/CVE-2026-92031.md)
  `CVE-2026-92031` · CVE record: Mozilla Firefox and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure
- [Username Enumeration via SMS OTP Flow in WSO2 Identity Server Allows User Account Discovery](https://agentprime.io/advisories/CVE-2025-13166.md)
  `CVE-2025-13166` · CVE record: WSO2 WSO2 Identity Server · CVSS 3.7 Low · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure
- [Username Enumeration via Self Registration Flow in Multiple WSO2 Products Allows User Account Discovery](https://agentprime.io/advisories/CVE-2025-5802.md)
  `CVE-2025-5802` · CVE record: WSO2 WSO2 API Manager and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure
- [Sealed Secrets: decryption oracle via Go template injection in unauthenticated controller endpoints](https://agentprime.io/advisories/CVE-2026-59341.md)
  `CVE-2026-59341` · CVE record: Bitnami sealed-secrets · CVSS 4.2 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure
- [WP Directory Kit <= 1.5.7 - Unauthenticated Unpublished Listing Disclosure via map_infowindow](https://agentprime.io/advisories/CVE-2026-18232.md)
  `CVE-2026-18232` · CVE record: Unknown WP Directory Kit · CVSS 5.3 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure
- [WP Directory Kit <= 1.5.7 - Contributor+ Non-Public Listing Field Disclosure via Shortcodes](https://agentprime.io/advisories/CVE-2026-16592.md)
  `CVE-2026-16592` · CVE record: Unknown WP Directory Kit · CVSS 2.7 Low · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure
- [Hawtio-operator: hawtio-operator: tls private key written to operator log at debug level](https://agentprime.io/advisories/CVE-2026-81320.md)
  `CVE-2026-81320` · CVE record: Red Hat Red Hat build of Apache Camel - HawtIO 4 · CVSS 5.5 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure
- [3D FlipBook <= 1.16.20 - Unauthenticated Sensitive Information Exposure in 'id' Parameter](https://agentprime.io/advisories/CVE-2026-15758.md)
  `CVE-2026-15758` · CVE record: iberezansky 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery · CVSS 5.3 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure
- [D-Link DIR-882 CGI Binary dllog.cgi main information disclosure](https://agentprime.io/advisories/CVE-2026-90881.md)
  `CVE-2026-90881` · CVE record: D-Link DIR-882 · CVSS 6.9 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure, Broken access control
- [An issue was discovered in Keyfactor SignServer before 7.6.0.](https://agentprime.io/advisories/CVE-2026-25827.md)
  `CVE-2026-25827` · CVE record · CVSS 2.3 Low · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure
- [An issue was discovered in Keyfactor SignServer before 7.6.0.](https://agentprime.io/advisories/CVE-2026-25826.md)
  `CVE-2026-25826` · CVE record · CVSS 4.9 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure
- [PHPGurukul Blood Donor Management System Login_Model.php cleartext storage in file](https://agentprime.io/advisories/CVE-2026-90842.md)
  `CVE-2026-90842` · CVE record: PHPGurukul Blood Donor Management System · CVSS 6.3 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Information disclosure, CWE-313
- [GrowthBook through 5.0.1 Information Disclosure via Public Endpoints](https://agentprime.io/advisories/CVE-2026-91198.md)
  `CVE-2026-91198` · CVE record: growthbook growthbook · CVSS 6.9 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Information disclosure
- [Information disclosure in Apple iOS and iPadOS and others](https://agentprime.io/advisories/CVE-2026-86883.md)
  `CVE-2026-86883` · CVE record: Apple iOS and iPadOS and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Information disclosure
- [Information disclosure in Apple iOS and iPadOS and others](https://agentprime.io/advisories/CVE-2026-86895.md)
  `CVE-2026-86895` · CVE record: Apple iOS and iPadOS and 3 more · CVSS 7.5 High · Not analysed yet · Published 14 Sept 2026 · Tags: Information disclosure
- [Exposure of personal information in Apple iOS and iPadOS and others](https://agentprime.io/advisories/CVE-2026-86904.md)
  `CVE-2026-86904` · CVE record: Apple iOS and iPadOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 14 Sept 2026 · Tags: Information disclosure
- [Information disclosure in Apple iOS and iPadOS and others](https://agentprime.io/advisories/CVE-2026-43664.md)
  `CVE-2026-43664` · CVE record: Apple iOS and iPadOS and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Information disclosure
- [Insufficiently random values in Apple iOS and iPadOS and others](https://agentprime.io/advisories/CVE-2026-84606.md)
  `CVE-2026-84606` · CVE record: Apple iOS and iPadOS and 2 more · CVSS 7.5 High · Not analysed yet · Published 14 Sept 2026 · Tags: Authentication bypass, Weak cryptography or TLS, Information disclosure
- [Information disclosure in Apple iOS and iPadOS and others](https://agentprime.io/advisories/CVE-2026-43687.md)
  `CVE-2026-43687` · CVE record: Apple iOS and iPadOS and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Information disclosure
- [Information disclosure in Apple iOS and iPadOS](https://agentprime.io/advisories/CVE-2026-64761.md)
  `CVE-2026-64761` · CVE record: Apple iOS and iPadOS · CVSS 7.5 High · Not analysed yet · Published 14 Sept 2026 · Tags: Information disclosure
- [Information disclosure in Apple iOS and iPadOS and others](https://agentprime.io/advisories/CVE-2026-65371.md)
  `CVE-2026-65371` · CVE record: Apple iOS and iPadOS and 4 more · CVSS 3.3 Low · Not analysed yet · Published 14 Sept 2026 · Tags: Information disclosure
- [Information disclosure in Apple iOS and iPadOS and others](https://agentprime.io/advisories/CVE-2026-84626.md)
  `CVE-2026-84626` · CVE record: Apple iOS and iPadOS and 4 more · CVSS 3.3 Low · Not analysed yet · Published 14 Sept 2026 · Tags: Information disclosure
- [Information disclosure in Apple macOS and others](https://agentprime.io/advisories/CVE-2026-84586.md)
  `CVE-2026-84586` · CVE record: Apple macOS and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Information disclosure
- [Sensitive information in log files in Apple macOS](https://agentprime.io/advisories/CVE-2026-84525.md)
  `CVE-2026-84525` · CVE record: Apple macOS · CVSS 5.5 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Information disclosure
- [Sensitive information in log files in Apple iOS and iPadOS and others](https://agentprime.io/advisories/CVE-2026-84513.md)
  `CVE-2026-84513` · CVE record: Apple iOS and iPadOS and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Information disclosure
- [Information disclosure in Apple iOS and iPadOS and others](https://agentprime.io/advisories/CVE-2026-86887.md)
  `CVE-2026-86887` · CVE record: Apple iOS and iPadOS and 1 more · CVSS 3.3 Low · Not analysed yet · Published 14 Sept 2026 · Tags: Information disclosure
- [Information disclosure in Apple iOS and iPadOS and others](https://agentprime.io/advisories/CVE-2026-84530.md)
  `CVE-2026-84530` · CVE record: Apple iOS and iPadOS and 4 more · CVSS 3.3 Low · Not analysed yet · Published 14 Sept 2026 · Tags: Information disclosure
- [Exposure of personal information in Apple macOS](https://agentprime.io/advisories/CVE-2026-28836.md)
  `CVE-2026-28836` · CVE record: Apple macOS · CVSS 6.1 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Information disclosure
- [Sensitive information in log files in Apple iOS and iPadOS and others](https://agentprime.io/advisories/CVE-2026-84527.md)
  `CVE-2026-84527` · CVE record: Apple iOS and iPadOS and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Information disclosure
- [Information disclosure in Apple iOS and iPadOS and others](https://agentprime.io/advisories/CVE-2026-84625.md)
  `CVE-2026-84625` · CVE record: Apple iOS and iPadOS and 3 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Sept 2026 · Tags: Information disclosure
- [Information disclosure in Apple iOS and iPadOS](https://agentprime.io/advisories/CVE-2026-86878.md)
  `CVE-2026-86878` · CVE record: Apple iOS and iPadOS · CVSS 5.5 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Information disclosure

Newest: <https://agentprime.io/advisories/tag/info-disclosure.md>
Older: <https://agentprime.io/advisories/tag/info-disclosure.md?cursor=WyIyMDI2LTA5LTE0VDIwOjQ3OjU2LjczMTAwMFoiLCJDVkUtMjAyNi04Njg3OCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=info-disclosure&cursor=WyIyMDI2LTA5LTE1VDIwOjA0OjQ2LjgzNTAwMFoiLCJDVkUtMjAyNi04MzI4NyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/info-disclosure/?cursor=WyIyMDI2LTA5LTE1VDIwOjA0OjQ2LjgzNTAwMFoiLCJDVkUtMjAyNi04MzI4NyJd>. Everything for agents: <https://agentprime.io/llms.txt>.