Information disclosure.

OpenObserve: Unauthenticated /config/runtime endpoint exposes PostgreSQL database credentials

• openobserve
• Information disclosure

authentik: Stored credentials are readable with view permission alone

• authentik
• Information disclosure
• Hard-coded credentials

LaSuite Doc: Public Documents Enumeration

• suitenumerique docs
• Information disclosure
• Broken access control

BentoPDF: Workflow Import Allows Unvalidated TSA URL Leading to PDF Hash Exfiltration via RFC 3161 Requests

• alam00000 bentopdf
• Information disclosure
• Insecure deserialization

REDAXO: Unwhitelisted ORDER BY Column in rex_list Allows Authenticated Column Enumeration

• Information disclosure
• CWE-20

<5.21.2 · fixed in 5.21.2

Multiple Vulnerabilities in IBM Concert Software

• IBM Concert
• Information disclosure

Spectra Legacy – Gutenberg Blocks <= 2.20.0 - Authenticated (Contributor+) Sensitive Information Exposure

• brainstormforce Spectra Legacy – Gutenberg Blocks
• Information disclosure

Plaintext Password Disclosure via VBScript Sensor Error Message in Paessler PRTG Network Monitor

• Paessler GmbH PRTG Network Monitor
• Information disclosure

O2OA Cipher Connection CipherConnectionAction.java list information disclosure

• O2OA
• Information disclosure
• Broken access control

ezGlobal｜GPM LIGHT - Sensitive Data Exposure

• ezGlobal GPM LIGHT
• Information disclosure

Events Manager 7.4.1 - 7.4.4 - Subscriber+ Unpublished Event and Location Disclosure via 'owner' Parameter

• Events Manager
• Information disclosure

Masteriyo LMS < 3.4.2 - Subscriber+ Quiz Answer Key Disclosure

• Masteriyo LMS
• Information disclosure

SPON Communications IP Network Audio Device XC-9603 Configuration File Download sys_cfg.txt loadCfg information disclosure

• SPON Communications IP Network Audio Device XC-9603
• Information disclosure
• Broken access control

Intelliants Subrion CMS actions.json assign-owner information disclosure

• Intelliants Subrion CMS
• Information disclosure
• Broken access control

An issue in geelen mcp-remote 0.1.18 through 0.1.38 allows a remote attacker to obtain sensitive information via the SSE transport eventSourceInit fetch wrapper " src/lib/utils.ts

• Information disclosure

An issue in geelen mcp-remote 0.1.32 through 0.1.38 allows a remote attacker to obtain sensitive information via the src/lib/authorization-server-metadata.ts, src/lib/utils.ts components

• Information disclosure

LB-Link BL-CPE600EU Configuration Backup Mifi_config.bin information disclosure

• LB-Link BL-CPE600EU
• Information disclosure
• Broken access control

DataStage on Cloud Pak for Data has several vulnerabilities

• IBM DataStage on Cloud Pak for Data
• Information disclosure

Formie: Missing authorization on sent notification resend modal exposes submission PII

• Information disclosure
• Broken access control

<2.2.23 || >=3.0.0, <3.1.31 · fixed in 2.2.23, 3.1.31

RabbitMQ: AMQP 1.0 shovel status exposes plaintext URI passwords

• rabbitmq-server
• Information disclosure

RabbitMQ: Shovel DEBUG log of full state exposes decrypted URIs

• rabbitmq-server
• Information disclosure

Automation-controller: automation-controller: unauthenticated /api/v2/ping/ discloses automation-mesh instance topology and instance-group membership

• Red Hat Ansible Automation Platform 2.5 for RHEL 8
• Red Hat Ansible Automation Platform 2.5 for RHEL 9
• Information disclosure

Klever-Go: /log controls global node logging

• Information disclosure
• Authentication bypass

<1.7.20 · fixed in 1.7.20

sfturing hosp_order CommonUserServiceImpl.java cleartext storage

• sfturing hosp_order
• Information disclosure
• CWE-310

Automation-controller: automation-controller-container: automation-controller: write-only survey password recovered in plaintext via schedule/workflowjobtemplatenode survey min/max validation error m…

• Red Hat Ansible Automation Platform 2.5 for RHEL 8
• Red Hat Ansible Automation Platform 2.5 for RHEL 9
• Information disclosure

Joomla Extension - joomshaper.com - Unauthenticated PII Exposure via IDOR in Guest Checkout in Easy Store extension 1.0.0-3.0.0

• joomshaper.com Easy Store extension for Joomla
• Information disclosure
• Broken access control

Automation-controller: automation-controller-container: automation-controller: notification template jinja whitelist bypass via conditional gating leaks tracebacks

• Red Hat Ansible Automation Platform 2.5 for RHEL 8
• Red Hat Ansible Automation Platform 2.5 for RHEL 9
• Information disclosure

Automation-controller: automation-controller-container: automation-controller: verbose internal exception disclosure via hostlist bare-exception handler

• Red Hat Ansible Automation Platform 2.7
• Red Hat Ansible Automation Platform 2
• Information disclosure

WordPress TrustedLogin Connector plugin <= 2.0.3 - Sensitive Data Exposure vulnerability

• TrustedLogin Connector
• Information disclosure

Cinnamon's kotaemon contains improper authorization checks in multi‑user chat handlers

• Cinnamon AI Kotaemon
• Information disclosure
• Broken access control

IBM Guardium Data Protection is affected by multiple vulnerabilities.

• IBM Guardium Data Protection
• Information disclosure

Multiple Vulnerabilities in IBM Concert Software

• IBM Concert
• Information disclosure

Foxit PDF Editor/Reader Missing Authorization Information Disclosure Vulnerability

• Foxit Software Inc. Foxit PDF Editor
• Foxit Software Inc. Foxit PDF Reader
• Information disclosure

NP Quote Request for WooCommerce < 2.4.16 - Unauthenticated Order Data Disclosure via Quote Request Page

• NP Quote Request for WooCommerce
• Information disclosure

WPC Smart Compare for WooCommerce < 6.6.1 - Unauthenticated Password-Protected Product Description Disclosure via woosc_load

• WPC Smart Compare for WooCommerce
• Information disclosure

FluentBoards 1.95 - 2.0.15 - Unauthenticated Board Member Email Address Disclosure via Public Board Endpoints

• FluentBoards
• Information disclosure

Sale Booster 7.0.0 - 7.5.1 - Unauthenticated Non-Public Product Disclosure

• Product Badge, Label, Countdown Timer for WooCommerce
• Information disclosure

PostX < 5.0.41 - Unauthenticated Custom Field Key Disclosure via REST API

• Post Grid Gutenberg Blocks
• Information disclosure

WP Recipe Maker < 10.8.2 - Subscriber+ Non-Public List Title Disclosure via wprm_search_lists

• WP Recipe Maker
• Information disclosure

WP Recipe Maker 10.3.0 - 10.8.1 - Subscriber+ Draft and Private Recipe Content Disclosure via wprm_shortcode_preview

• WP Recipe Maker
• Information disclosure

The Events Calendar 4.5 - 6.17.4.1 - Unauthenticated Non-Public Venue and Organizer Disclosure via REST API

• The Events Calendar
• Information disclosure

Easy Hide Login < 1.7 - Login Page Protection Bypass / Hidden URL Disclosure

• Easy Hide Login
• Information disclosure

Directorist 8.1 - 8.9.4 - Unauthenticated Sensitive Data Disclosure via REST Users Endpoint

• Directorist: AI-Powered Business Directory, Listings & Classified Ads
• Information disclosure

Zportals < 6.4.2 - Subscriber+ User Email Disclosure

• zportals
• Information disclosure

Multiple Vulnerabilities in IBM Concert Software

• IBM Concert
• Information disclosure

lightrag-hku: Sensitive Information Exposure Through Raw Exception Messages in API Error Responses

• Information disclosure

<1.5.5 · fixed in 1.5.5

Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode

• Information disclosure

>=3.0.0, <3.10.0 · fixed in 3.10.0

OpenBao Agent Writes Secrets to Stdout

• Information disclosure

<0.0.0-20260714163218-90272575e5f5 || >=0.1.0, <=1.1.5 · fixed in 0.0.0-20260714163218-90272575e5f5

MCP Atlassian: OAuth fallback token storage writes plaintext access and refresh tokens with group-readable permissions

• Information disclosure

<0.22.0 · fixed in 0.22.0

MCP Atlassian: Arbitrary file read via confluence_upload_attachment allows exfiltration of server credentials

• Path traversal
• Information disclosure

<0.22.0 · fixed in 0.22.0

MCP Atlassian: MCP HTTP Client Server-Local File Exfiltration via Unvalidated Attachment Upload Path

• Path traversal
• Information disclosure

<0.22.0 · fixed in 0.22.0

wlc may disclose API tokens to project-configured URLs

• Information disclosure
• CWE-349

<2.0.1 · fixed in 2.0.1

OpenClaw iOS before 2026.8.11 Credential Exposure via Deep-Link URL Logging

• OpenClaw iOS
• Information disclosure

Unauthenticated Remote Sensitive Information Disclosure Vulnerability in HPE Networking Analytics and Location Engine (ALE)

• Hewlett Packard Enterprise (HPE) ALE
• Information disclosure

Unauthenticated Remote Unauthorized Access, Information Disclosure, and Denial of Service Vulnerabilities in HPE Networking Analytics and Location Engine (ALE)

• Hewlett Packard Enterprise (HPE) ALE
• Information disclosure

Unauthenticated Remote Sensitive Information Disclosure Vulnerability in HPE Networking Analytics and Location Engine (ALE)

• Hewlett Packard Enterprise (HPE) ALE
• Information disclosure

Dokploy: Git Provider Credential Exposure via Unprotected .one Endpoints and application.one

• dokploy
• Information disclosure
• Broken access control

Dark Reader: Ability to request icon-like bitmap data from certain local web servers

• darkreader
• Information disclosure
• CWE-346

Twenty: Field-level read bypass

• twenty
• Information disclosure
• Broken access control

MISP OrganisationsController File Existence and Image-Type Oracle via Forged Upload tmp_name

• MISP
• Information disclosure
• CWE-20