CVE-2026-72402

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter verifier logging mechanism. The printbpfinsn function, responsible for masking sensitive pointer values in verifier logs, did not correctly mask all pseudo-pointer types. This oversight could lead to kernel memory addresses being...

CVE-2026-18710

A flaw was found in org.mongodb/mongodb-driver. During routine client initialization, sensitive configuration information, including credentials for outbound network connectivity, is written to application log output in cleartext. A local attacker with the ability to read the affected application...

EUVD-2026-60543

Mattermost Desktop App versions =6.2 6.2.2.0 fail to redact the pre-auth secret when generating a diagnostics report, which allows a local attacker with access to a user's diagnostics report or log files to obtain the plaintext pre-auth secret configured for a connected server via inspecting the...

PT-2026-77205

Name of the Vulnerable Software and Affected Versions Vvveb versions prior to 1.0.8.4 Description Backend post revision operations allow a low-privileged Author to access revisions for posts owned by another Author. The 'admin/controller/content/revisions.php' controller and 'admin/sql/sqlite/pos...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102110)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102110 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: fix missing lastunlinktrans update when removing a directory When removing a directory we...

Linux Distros Unpatched Vulnerability : CVE-2026-72105

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-log: fix a bitsetsize overflow on 32bit machines Commit c20e36b7631d dm log: fix out-of-bounds write due to regioncount overflow made sure that regioncount...

CVE-2026-69146

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.13.0 until 3.15.0, LogInputs is absent from BEFOREREQUESTHANDLERS in the mlflow/server/auth package, allowing any authenticated user to call POST /api/2.0/mlflow/runs/log-inputs...

CVE-2026-72105

A flaw was found in the Linux kernel's device mapper logging dm-log component. On 32-bit systems, an error in calculating the bitsetsize can cause this variable to wrap around to zero. This incorrect calculation leads to a failure in memory allocation, which can result in a Denial of Service DoS...

CRLF Injection

Apache CXF is vulnerable to CRLF Injection. The vulnerability is due to unsanitized clientId values from HTTP requests being directly included in OAuth2 server log messages, which allows an attacker to inject arbitrary content or forged log entries into server log files...

CVE-2026-75057

In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log...

EUVD-2026-60256

In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log...

CVE-2026-75057

In IntelliJ IDEA before 2026.1.5, Git credentials were written in plaintext to the IDE log, exposing them to any local user with log read access. CVSS 6.2 (MEDIUM) reflects high confidentiality impact. Exploitation details are not provided; upgrade to 2026.1.5 to remediate.

CVE-2026-75057

In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log...

CVE-2026-64868 New API: Unauthenticated payment webhooks allow memory and disk DoS via unbounded body reads and full-body logging

New API is a large language mode LLM gateway and artificial intelligence AI asset management system. Prior to 1.0.0-rc.11, POST /api/stripe/webhook, POST /api/creem/webhook, and POST /api/waffo/webhook read and log full request bodies before signature validation in router/api-router.go and the...

CVE-2026-59911

Dell ObjectScale, versions prior to 4.3.0.1, contains an Insertion of Sensitive Information into Log File vulnerability in the svctools. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2026-59911

Dell ObjectScale versions prior to 4.3.0.1 have an Insertion of Sensitive Information into Log File flaw in the svc_tools component. A low-privileged, locally authenticated attacker can read sensitive data written to logs, causing information disclosure (CVSS 5.5, medium). No exploitation details...

EUVD-2026-60203

Dell ObjectScale, versions prior to 4.3.0.1, contains an Insertion of Sensitive Information into Log File vulnerability in the svctools. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2026-59911

Dell ObjectScale, versions prior to 4.3.0.1, contains an Insertion of Sensitive Information into Log File vulnerability in the svctools. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...

Security Bulletin: IBM Operations Analytics - Log Analysis is affected by an Improper Serialization due to Apache Log4j JSON Template Layout

Summary Apache Log4j JSON Template Layout in Apache Solr is used by IBM Operations Analytics - Log Analysis as part of the encoding log events. CVE-2026-34481. Vulnerability Details CVEID:CVE-2026-34481 DESCRIPTION: Apache Log4j's JsonTemplateLayout...

EUVD-2026-60099

opensslencrypt versions before 1.4.0 accept refresh tokens as URL query parameters in keyserver and telemetry server routes. Attackers can extract tokens from server logs, proxy logs, browser history, and HTTP Referer headers to gain unauthorized access...