# Information disclosure. Sensitive data exposed to people who shouldn’t see it. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [Windows Installer Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-83672.md) `CVE-2026-83672` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [Windows Kernel Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-70232.md) `CVE-2026-70232` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [Windows Kernel Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-70199.md) `CVE-2026-70199` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [Windows Cryptographic Services Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-70055.md) `CVE-2026-70055` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [Microsoft Office SharePoint Tampering Vulnerability](https://agentprime.io/advisories/CVE-2026-97782.md) `CVE-2026-97782` · CVE record: Microsoft Microsoft SharePoint Server Subscription Edition · CVSS 6.8 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [Microsoft Office Excel Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-97740.md) `CVE-2026-97740` · CVE record: Microsoft Microsoft 365 Apps for Enterprise and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [Windows NTFS Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-96935.md) `CVE-2026-96935` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [Windows Secure Kernel Mode Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-96865.md) `CVE-2026-96865` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.6 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [Windows Projected File System Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-96857.md) `CVE-2026-96857` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [WebDAV Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-88137.md) `CVE-2026-88137` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [Azure Active Directory Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-85916.md) `CVE-2026-85916` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [Azure HDInsight Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-85891.md) `CVE-2026-85891` · CVE record: Microsoft Azure HDInsight · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [Windows Kernel-Mode Drivers Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-85857.md) `CVE-2026-85857` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [Windows Event Viewer Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-85840.md) `CVE-2026-85840` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [Windows Bind Filter Driver Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-85812.md) `CVE-2026-85812` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [Windows Sysmain Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-85793.md) `CVE-2026-85793` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [Windows Win32 Kernel Subsystem Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-83909.md) `CVE-2026-83909` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [Windows Clipboard User Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-83893.md) `CVE-2026-83893` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-83713.md) `CVE-2026-83713` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [HTTP.sys Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-83705.md) `CVE-2026-83705` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [Windows iSCSI Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-69644.md) `CVE-2026-69644` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [Windows Kernel Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-108462.md) `CVE-2026-108462` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [vhr through commit 03abbd3 Information Disclosure of Operator Password Hashes via GET /chat/hrs](https://agentprime.io/advisories/CVE-2026-110217.md) `CVE-2026-110217` · CVE record: lenve vhr · CVSS 7.1 High · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [Busybox: busybox: httpd user existence oracle in non-default shadow-disabled builds](https://agentprime.io/advisories/CVE-2026-88834.md) `CVE-2026-88834` · CVE record: Red Hat Red Hat Hardened Images · CVSS 3.7 Low · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [Dio: Cross-origin redirect leaks sensitive request headers in \`dio_http2_adapter\`](https://agentprime.io/advisories/CVE-2026-103030.md) `CVE-2026-103030` · CVE record: cfug dio · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [FrankenPHP: Docker images serve phpinfo() as the default index.php, leaking environment variables](https://agentprime.io/advisories/CVE-2026-85733.md) `CVE-2026-85733` · CVE record: php frankenphp · CVSS 5.3 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [Sensitive information in log files in Ivanti Xtraction](https://agentprime.io/advisories/CVE-2026-106035.md) `CVE-2026-106035` · CVE record: Ivanti Xtraction · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [Plane: Unauthenticated Workspace Invitation Token Leakage](https://agentprime.io/advisories/CVE-2026-102981.md) `CVE-2026-102981` · CVE record: makeplane plane · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure, Broken access control - [HBAI-Ltd Toonflow-app exportData Endpoint information disclosure](https://agentprime.io/advisories/CVE-2026-109526.md) `CVE-2026-109526` · CVE record: HBAI-Ltd Toonflow-app · CVSS 4.8 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure, Broken access control - [Wazuh 4.0.0 before 4.14.8 authd.pass Disclosure via Agent 000 Config Endpoint](https://agentprime.io/advisories/CVE-2026-74047.md) `CVE-2026-74047` · CVE record: Wazuh wazuh-manager · CVSS 7.1 High · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [EspoCRM 4.0.0 before 10.0.7 Field-Level Security Bypass via Note Read Endpoint](https://agentprime.io/advisories/CVE-2026-109959.md) `CVE-2026-109959` · CVE record: espocrm espocrm · CVSS 5.3 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [EspoCRM 4.0.0 before 10.0.7 Field-Level Access Bypass via Address-Book Search](https://agentprime.io/advisories/CVE-2026-109958.md) `CVE-2026-109958` · CVE record: espocrm espocrm · CVSS 5.3 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [FreeRDP 3.0.0 before 3.32.0 Memory Disclosure via SCardTransmit Smartcard Redirection](https://agentprime.io/advisories/CVE-2026-109948.md) `CVE-2026-109948` · CVE record: FreeRDP FreeRDP · CVSS 5.3 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [Information disclosure in the Storage: IndexedDB component](https://agentprime.io/advisories/CVE-2026-109777.md) `CVE-2026-109777` · CVE record: Mozilla Firefox and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [Information disclosure in the WebRTC: Networking component](https://agentprime.io/advisories/CVE-2026-109771.md) `CVE-2026-109771` · CVE record: Mozilla Firefox and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [Information disclosure in the Networking: Cache component](https://agentprime.io/advisories/CVE-2026-109769.md) `CVE-2026-109769` · CVE record: Mozilla Firefox and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [Information disclosure in the Networking component](https://agentprime.io/advisories/CVE-2026-109767.md) `CVE-2026-109767` · CVE record: Mozilla Firefox and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [Information disclosure in the Networking component](https://agentprime.io/advisories/CVE-2026-109751.md) `CVE-2026-109751` · CVE record: Mozilla Firefox and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [Information disclosure in the PDF Viewer component](https://agentprime.io/advisories/CVE-2026-109742.md) `CVE-2026-109742` · CVE record: Mozilla Firefox and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [Information disclosure, privilege escalation in the Security: Process Sandboxing component](https://agentprime.io/advisories/CVE-2026-109709.md) `CVE-2026-109709` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [Information disclosure in Siemens RUGGEDCOM CROSSBOW](https://agentprime.io/advisories/CVE-2026-89203.md) `CVE-2026-89203` · CVE record: Siemens RUGGEDCOM CROSSBOW · CVSS 5.3 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [Sensitive information in error messages in Siemens .NET Client Library for SIMATIC S7 Webserver API](https://agentprime.io/advisories/CVE-2026-85115.md) `CVE-2026-85115` · CVE record: Siemens .NET Client Library for SIMATIC S7 Webserver API · CVSS 6.8 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [TYPO3-CORE-SA-2026-024: Security Misconfiguration in Form Framework](https://agentprime.io/advisories/PKSA-fykt-pmbg-txnv.md) `PKSA-fykt-pmbg-txnv`, `CVE-2026-109162` · Packagist `typo3/cms-form`: affected `>=14.0.0, <14.3.9`, fixed in `14.3.9` · CVSS 6.3 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure, CWE-696 - [WordPress Active Products Tables for WooCommerce plugin <= 2.1.3 - Sensitive Data Exposure vulnerability](https://agentprime.io/advisories/CVE-2026-108489.md) `CVE-2026-108489` · CVE record: PluginUs.Net Active Products Tables for WooCommerce · CVSS 5.3 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [Ad Inserter <= 2.8.18 - Authenticated (Subscriber+) Sensitive Information Disclosure in 'ai-debug-processing-fe' & 'ai-debug-meta' URL Parameters](https://agentprime.io/advisories/CVE-2026-89097.md) `CVE-2026-89097` · CVE record: spacetime Ad Inserter – Ad Manager & AdSense Ads · CVSS 4.3 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [Insertion of Sensitive Information into Log File in GitLab](https://agentprime.io/advisories/CVE-2026-101168.md) `CVE-2026-101168` · CVE record: GitLab GitLab · CVSS 6.2 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [Information Disclosure vulnerability in SAP NetWeaver Enterprise Portal](https://agentprime.io/advisories/CVE-2026-89118.md) `CVE-2026-89118` · CVE record: SAP_SE SAP NetWeaver Enterprise Portal · CVSS 5.3 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [DeepSeek V4 is vulnerable to Incorrect Access Control via a crafted input.](https://agentprime.io/advisories/CVE-2026-52394.md) `CVE-2026-52394` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [IBM i is Information Disclosure](https://agentprime.io/advisories/CVE-2026-17484.md) `CVE-2026-17484` · CVE record: IBM i · CVSS 5.3 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Information disclosure - [IBM i is Information Disclosure](https://agentprime.io/advisories/CVE-2026-17487.md) `CVE-2026-17487` · CVE record: IBM i · CVSS 5.3 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Information disclosure - [code-projects Matrimonial System matrimony.sql file access](https://agentprime.io/advisories/CVE-2026-108938.md) `CVE-2026-108938` · CVE record: code-projects Matrimonial System · CVSS 6.9 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Broken access control, Information disclosure - [IBM Aspera Enterprise Webapps Information Disclosure](https://agentprime.io/advisories/CVE-2026-75076.md) `CVE-2026-75076` · CVE record: IBM Aspera Enterprise WebApps · CVSS 4.3 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Information disclosure - [Security Vulnerability identified in IBM TRIRIGA - Information Disclosure in Admin Console](https://agentprime.io/advisories/CVE-2026-93892.md) `CVE-2026-93892` · CVE record: IBM TRIRIGA Application Platform · CVSS 8.1 High · Not analysed yet · Published 12 Oct 2026 · Tags: Information disclosure - [code-projects Online Ticket Reservation System medallion.sql file information disclosure](https://agentprime.io/advisories/CVE-2026-108937.md) `CVE-2026-108937` · CVE record: code-projects Online Ticket Reservation System · CVSS 6.9 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Information disclosure - [DataStage on Cloud Pak for Data Information Disclosure](https://agentprime.io/advisories/CVE-2026-82103.md) `CVE-2026-82103` · CVE record: IBM DataStage on Cloud Pak for Data · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Information disclosure - [Frappe 14.x before 14.45.0 Information Disclosure via Error Log Tracebacks](https://agentprime.io/advisories/CVE-2023-54407.md) `CVE-2023-54407` · CVE record: frappe frappe · CVSS 6.9 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Information disclosure - [Qexo initialization endpoint can reset setup state and expose stored credentials](https://agentprime.io/advisories/CVE-2026-44828.md) `CVE-2026-44828` · CVE record: Qexo Qexo · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Information disclosure - [Super Productivity: SuperSync E2EE setup uploads and stores all user operations in plaintext before password is set](https://agentprime.io/advisories/CVE-2026-102539.md) `CVE-2026-102539` · CVE record: super-productivity super-productivity · CVSS 5.7 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Information disclosure, CWE-693 - [Netcore NR268 DDNS ddns_wan_list_show.cgi ddns_wan_list_show information disclosure](https://agentprime.io/advisories/CVE-2026-108930.md) `CVE-2026-108930` · CVE record: Netcore NR268 · CVSS 5.1 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Information disclosure, Broken access control - [Telegram-Stremio 5.1.0 Insecure Session Storage via encode_string](https://agentprime.io/advisories/CVE-2026-109426.md) `CVE-2026-109426` · CVE record: weebzone Telegram-Stremio · CVSS 8.2 High · Not analysed yet · Published 12 Oct 2026 · Tags: Information disclosure Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .