Advisories · Weakness

Information disclosure.

Sensitive data exposed to people who shouldn’t see it. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

CVE-2026-80124 CVE record

CVSS 5.5 Medium

Sensitive information in log files in Dell Secure Connect Gateway 5.0 - Application and others
- Dell Secure Connect Gateway 5.0 - Application
- Dell Secure Connect Gateway 5.0 - Appliance
- Information disclosure
Not analysed yet 9 Sept 2026
CVE-2026-84222 CVE record

CVSS 5.3 Medium

Kirki 6.2.1 - 6.2.5 - Unauthenticated Non-Public Post Content Disclosure via 'kirki_data' Parameter
- Kirki
- Information disclosure
Not analysed yet 9 Sept 2026
CVE-2026-81022 CVE record

CVSS 5.3 Medium

SupportCandy 3.3.6 - 3.5.2 - Unauthenticated Ticket Content Disclosure via Auth Code Leak
- SupportCandy
- Information disclosure
Not analysed yet 9 Sept 2026
CVE-2026-81021 CVE record

CVSS 5.3 Medium

SupportCandy 3.2.9 - 3.5.2 - Unauthenticated Ticket Attachment Disclosure
- SupportCandy
- Information disclosure
Not analysed yet 9 Sept 2026
CVE-2026-80340 CVE record

CVSS 5.3 Medium

Payment Plugins for PayPal WooCommerce < 2.0.26 - Unauthenticated Customer PII Disclosure via order-pay
- Payment Plugins for PayPal WooCommerce
- Information disclosure
Not analysed yet 9 Sept 2026
CVE-2026-80339 CVE record

CVSS 5.3 Medium

Payment Plugins for Stripe WooCommerce < 4.0.12 - Unauthenticated Customer PII Disclosure via order-pay
- Payment Plugins for Stripe WooCommerce
- Information disclosure
Not analysed yet 9 Sept 2026
CVE-2026-16960 CVE record

CVSS 7.5 High

Loops & Logic < 4.3.0 - Unauthenticated User Data and Site Option Disclosure
- Loops & Logic
- Information disclosure
Not analysed yet 9 Sept 2026
CVE-2026-87032 CVE record

CVSS 4.3 Medium

Tanium addressed an information disclosure vulnerability in Tanium Server.
- Tanium Server
- Information disclosure
Not analysed yet 9 Sept 2026
CVE-2026-87035 CVE record

CVSS 4.3 Medium

Tanium addressed an information disclosure vulnerability in Comply.
- Tanium Comply
- Information disclosure
Not analysed yet 9 Sept 2026
CVE-2026-87593 CVE record

CVSS 6.5 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 9 Sept 2026
CVE-2026-87437 CVE record

CVSS 6.5 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 9 Sept 2026
CVE-2026-87477 CVE record

CVSS 6.5 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 9 Sept 2026
CVE-2026-87461 CVE record

CVSS 4.3 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 9 Sept 2026
CVE-2026-87490 CVE record

CVSS 6.5 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 9 Sept 2026
CVE-2026-87565 CVE record

CVSS 6.5 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 9 Sept 2026
CVE-2026-87545 CVE record

CVSS 6.5 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 9 Sept 2026
CVE-2026-87459 CVE record

CVSS 6.5 Medium

Observable discrepancy in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 9 Sept 2026
CVE-2026-87620 CVE record

CVSS 6.5 Medium

Observable discrepancy in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 9 Sept 2026
CVE-2026-87619 CVE record

CVSS 4.3 Medium

Observable discrepancy in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 9 Sept 2026
CVE-2026-87566 CVE record

CVSS 5.3 Medium

Observable discrepancy in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 9 Sept 2026
CVE-2026-87623 CVE record

CVSS 6.5 Medium

Observable discrepancy in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 9 Sept 2026
CVE-2026-87531 CVE record

CVSS 3.1 Low

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 9 Sept 2026
CVE-2026-87435 CVE record

CVSS 5.3 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 9 Sept 2026
CVE-2026-87454 CVE record

CVSS 6.5 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 9 Sept 2026
CVE-2026-87518 CVE record

CVSS 5.3 Medium

Observable discrepancy in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 9 Sept 2026
CVE-2026-87439 CVE record

CVSS 5.3 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 9 Sept 2026
CVE-2026-87451 CVE record

CVSS 3.1 Low

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 9 Sept 2026
CVE-2026-87541 CVE record

CVSS 6.5 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 9 Sept 2026
CVE-2026-87495 CVE record

CVSS 4.3 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 9 Sept 2026
CVE-2026-87574 CVE record

CVSS 4.3 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 9 Sept 2026
CVE-2026-87516 CVE record

CVSS 4.3 Medium

Observable discrepancy in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 9 Sept 2026
CVE-2026-87539 CVE record

CVSS 3.1 Low

Observable discrepancy in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 9 Sept 2026
CVE-2026-87521 CVE record

CVSS 3.1 Low

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 9 Sept 2026
CVE-2026-87658 CVE record

CVSS 4.3 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 9 Sept 2026
CVE-2026-87478 CVE record

CVSS 6.5 Medium

Observable discrepancy in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 9 Sept 2026
CVE-2026-79323 CVE record

CVSS 7.5 High

Information disclosure in the blogComments GraphQL query in Magefan Blog GraphQL for Magento 2 (magefan/module-blog-graph-ql) through 2.2.1 allows remote unauthenticated attackers to obtain blog comm…
- Information disclosure
Not analysed yet 9 Sept 2026
CVE-2026-61911 CVE record

CVSS 4.3 Medium

An issue was discovered in Cyrus IMAP before 3.12.4.
- cyrusimap Cyrus IMAP
- Information disclosure
Not analysed yet 9 Sept 2026
CVE-2026-52482 CVE record

CVSS 7.5 High

An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the inetd service spawns /app/sh_for_telnet
- Information disclosure
Not analysed yet 9 Sept 2026
CVE-2026-53933 CVE record

CVSS 6.9 Medium

Maravel-Framework Vulnerable to Side-Channel Information Disclosure (Error Oracle) via Dynamic Route Fuzzing
- macropay-solutions maravel-framework
- Information disclosure
Not analysed yet 8 Sept 2026
CVE-2026-78631 CVE record

CVSS 5.3 Medium

Improper Restriction of Sensitive Information in Okta Hyperdrive Agent Logging
- Okta Hyperdrive Agent
- Information disclosure
Not analysed yet 8 Sept 2026
CVE-2026-78627 CVE record

CVSS 7.3 High

Improper Credential Protection in Okta Hyperdrive Integration Installer Logging
- Okta Hyperdrive Integration Plugin
- Information disclosure
Not analysed yet 8 Sept 2026
CVE-2026-86464 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Information disclosure in Eclipse Foundation Eclipse aeriOS
- Eclipse Foundation Eclipse aeriOS
- Information disclosure
- Authentication bypass
Not analysed yet 8 Sept 2026
gitpython PyPI

CVSS 7.1 High

GitPython: TagReference.create positional reference bypasses kwargs-only --file guard, enabling arbitrary file read (incomplete fix of 3af0c251)
- Path traversal
- Command injection
<3.1.59 · fixed in 3.1.59

GHSA-3wxw-xv34-2frg · CVE-2026-78679 Not analysed yet 8 Sept 2026
gitpython PyPI

CVSS 7.1 High

GitPython: Incomplete unsafe_git_revision_options denylist omits --contents/-S, enabling arbitrary file read via Repo.blame()
- Command injection
- Information disclosure
<3.1.59 · fixed in 3.1.59

GHSA-5xxx-qhh7-9287 · CVE-2026-78678 Not analysed yet 8 Sept 2026
gitpython PyPI

CVSS 8.6 High

GitPython: Arbitrary local file content disclosure via [include] directive in untrusted .gitmodules (SubmoduleConfigParser never disables merge_includes)
- Path traversal
- Information disclosure
<3.1.59 · fixed in 3.1.59

GHSA-7833-fr7j-v32q · CVE-2026-78675 Not analysed yet 8 Sept 2026
CVE-2026-66306 CVE record

CVSS 6.5 Medium

Skype for Business Information Disclosure Vulnerability
- Microsoft Skype for Business Server 2015 CU13
- Microsoft Skype for Business Server 2019 CU8
- Information disclosure
Not analysed yet 8 Sept 2026
CVE-2026-86672 CVE record

CVSS 6.9 Medium

ningzichun Student Management System Backup example.7z information disclosure
- ningzichun Student Management System
- Information disclosure
- Broken access control
Not analysed yet 8 Sept 2026
CVE-2026-69806 CVE record

CVSS 7.0 High

.NET Elevation of Privilege Vulnerability
- Microsoft .NET 10.0 runtime
- Microsoft .NET 11.0 runtime
- Code injection
- Information disclosure
Not analysed yet 8 Sept 2026
CVE-2026-81394 CVE record

CVSS 5.5 Medium

Microsoft Excel Information Disclosure Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Excel 2016
- Information disclosure
Not analysed yet 8 Sept 2026
CVE-2026-81387 CVE record

CVSS 5.5 Medium

Microsoft Excel Information Disclosure Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Excel 2016
- Information disclosure
Not analysed yet 8 Sept 2026
CVE-2026-73008 CVE record

CVSS 5.5 Medium

Windows Biometric Service Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Information disclosure
Not analysed yet 8 Sept 2026
CVE-2026-65812 CVE record

CVSS 6.8 Medium

Microsoft Teams for Android Information Disclosure Vulnerability
- Microsoft Teams for Android
- Information disclosure
Not analysed yet 8 Sept 2026
CVE-2026-69805 CVE record

CVSS 7.5 High

.NET Elevation of Privilege Vulnerability
- Microsoft Visual Studio 2022 version 17.14
- Microsoft Visual Studio 2026 version 18.9
- Path traversal
- Information disclosure
Not analysed yet 8 Sept 2026
CVE-2026-69351 CVE record

CVSS 5.5 Medium

Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Information disclosure
Not analysed yet 8 Sept 2026
CVE-2026-69315 CVE record

CVSS 5.5 Medium

Windows License Manager Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Information disclosure
Not analysed yet 8 Sept 2026
CVE-2026-69294 CVE record

CVSS 5.5 Medium

Microsoft COM for Windows Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Information disclosure
Not analysed yet 8 Sept 2026
CVE-2026-68886 CVE record

CVSS 5.5 Medium

Windows Network Connection Broker Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Information disclosure
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-68873 CVE record

CVSS 5.5 Medium

Windows Program Compatibility Assistant Service Information Disclosure Vulnerability
- Microsoft Windows 11 version 23H2
- Microsoft Windows 11 Version 24H2
- Information disclosure
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-68852 CVE record

CVSS 5.5 Medium

Microsoft Account Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Information disclosure
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-68842 CVE record

CVSS 5.5 Medium

Windows MIDI Service Module Information Disclosure Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- Information disclosure
Not analysed yet 8 Sept 2026