CVE-2026-75015

Apache Syncope contains an insufficiently protected credentials vulnerability affecting versions 3.0.0-M0 through 3.0.16 , 4.0.0-M0 through 4.0.7 , and 4.1.0-M0 through 4.1.2 . Audit events stored in the configured store are not sufficiently masked, allowing sensitive values (including nested sec...

CVE-2026-61802

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.14.0 through 4.14.6, a low-privilege API user can read the cleartext cluster key from a configuration endpoint that fails to redact it. The REST API provides a...

CVE-2026-61802

Wazuh (open-source XDR/SIEM platform), versions 4.14.0 through 4.14.6 , contains a configuration-redaction gap: the GET /cluster/local/config endpoint is gated only by cluster:read permission and lacks the mask_sensitive_config decorator that all sibling config-read endpoints carry. As a result, ...

CVE-2025-20345 Cisco Duo Authentication Proxy Information Disclosure Vulnerability

A vulnerability in the debug logging function of Cisco Duo Authentication Proxy could allow an authenticated, high-privileged, remote attacker to view sensitive information in a system log file. This vulnerability is due to insufficient masking of sensitive information before it is written to...

CVE-2023-44158

Sensitive information disclosure due to insufficient token field masking. The following products are affected: Acronis Cyber Protect 15 Linux, Windows before build 35979...