CVE-2026-123082

Docker Desktop before version 4.94.0 could write the signed-in user's Docker Hub access token a JWT in cleartext to application logs and diagnostics bundles. IPC payloads that were bare JSON strings or arrays were not redacted before logging, and a Docker Desktop component logged the token when i...

CVE-2026-123082 Docker Desktop logs can expose the Docker Hub access token

Docker Desktop before version 4.94.0 could write the signed-in user's Docker Hub access token a JWT in cleartext to application logs and diagnostics bundles. IPC payloads that were bare JSON strings or arrays were not redacted before logging, and a Docker Desktop component logged the token when i...

EUVD-2026-121149

Docker Desktop before version 4.94.0 could write the signed-in user's Docker Hub access token a JWT in cleartext to application logs and diagnostics bundles. IPC payloads that were bare JSON strings or arrays were not redacted before logging, and a Docker Desktop component logged the token when i...

CVE-2026-123082

Docker Desktop versions prior to 4.94.0 are vulnerable to a flaw where the signed-in user's Docker Hub access token (JWT) is written in cleartext to application logs and diagnostics bundles. This occurs because IPC payloads consisting of bare JSON strings or arrays were not redacted before loggin...

CVE-2026-123082: Docker Docker Desktop: Docker Desktop before version 4.94.0 could write the signed-in user's Docker Hub access token (a JWT) in cleartext to…

Docker Desktop before version 4.94.0 could write the signed-in user's Docker Hub access token a JWT in cleartext to application logs and diagnostics bundles. IPC payloads that were bare JSON strings or arrays were not redacted before logging, and a Docker Desktop component logged the token when i...

PT-2026-141722

Docker Desktop before version 4.94.0 could write the signed-in user's Docker Hub access token a JWT in cleartext to application logs and diagnostics bundles. IPC payloads that were bare JSON strings or arrays were not redacted before logging, and a Docker Desktop component logged the token when i...

CVE-2026-118798

Multiple sensitive authentication data, including credentials, OAuth-related secrets, session information, and authentication artifacts, are exposed through application logs and persistent client-side storage, enabling unauthorized access and session compromise...

CVE-2026-118798

The CompuGroup Medical Wingesfar software is affected by CVE-2026-118798, where multiple sensitive authentication data types are exposed. The vulnerability stems from the inclusion of credentials , OAuth-related secrets , session information , and authentication artifacts within application logs ...

CVE-2026-118798 Multiple sensitive authentication data exposed

Multiple sensitive authentication data, including credentials, OAuth-related secrets, session information, and authentication artifacts, are exposed through application logs and persistent client-side storage, enabling unauthorized access and session compromise...

EUVD-2026-120033

Multiple sensitive authentication data, including credentials, OAuth-related secrets, session information, and authentication artifacts, are exposed through application logs and persistent client-side storage, enabling unauthorized access and session compromise...

CVE-2026-118798: CompuGroup Medical Wingesfar: Multiple sensitive authentication data, including credentials, OAuth-related secrets, session information, and…

Multiple sensitive authentication data, including credentials, OAuth-related secrets, session information, and authentication artifacts, are exposed through application logs and persistent client-side storage, enabling unauthorized access and session compromise...

PT-2026-140391

Multiple sensitive authentication data, including credentials, OAuth-related secrets, session information, and authentication artifacts, are exposed through application logs and persistent client-side storage, enabling unauthorized access and session compromise...

CVE-2026-105963

A flaw was found in plugcrypto. An unauthenticated remote attacker can cause sensitive cryptographic secrets, such as the application's secret key base, to be exposed in application logs and crash reports. By submitting request data with unexpected argument types, an attacker triggers a validatio...

CVE-2026-121146

This vulnerability exists in the iRA 2.0 and iRA.ev mobile applications due to the recording of authentication tokens in application logs used for development and debugging. A local attacker with an access to logs could exploit this vulnerability by retrieving and misusing the exposed session...

CVE-2026-85260

A flaw was found in the Apache Camel MLLP Minimal Lower Layer Protocol component. This issue leads to information disclosure because clinical message payloads containing sensitive patient data are written to standard application logs. The component enables logging of protected health information ...

CVE-2026-121146

The iRA 2.0 and iRA.ev mobile applications by Tata Motors are vulnerable to an information disclosure flaw due to the recording of authentication tokens in application logs intended for development and debugging. A local attacker with access to these logs can retrieve and misuse the exposed sessi...

CVE-2026-121146 Information Disclosure Vulnerability in Tata Motors iRA and iRA.ev mobile application

This vulnerability exists in the iRA 2.0 and iRA.ev mobile applications due to the recording of authentication tokens in application logs used for development and debugging. A local attacker with an access to logs could exploit this vulnerability by retrieving and misusing the exposed session...

EUVD-2026-116907

This vulnerability exists in the iRA 2.0 and iRA.ev mobile applications due to the recording of authentication tokens in application logs used for development and debugging. A local attacker with an access to logs could exploit this vulnerability by retrieving and misusing the exposed session...

CVE-2026-121146: Tata Motors: This vulnerability exists in the iRA 2.0 and iRA.ev mobile applications due to the recording of authentication tokens…

This vulnerability exists in the iRA 2.0 and iRA.ev mobile applications due to the recording of authentication tokens in application logs used for development and debugging. A local attacker with an access to logs could exploit this vulnerability by retrieving and misusing the exposed session...

PT-2026-136953

This vulnerability exists in the iRA 2.0 and iRA.ev mobile applications due to the recording of authentication tokens in application logs used for development and debugging. A local attacker with an access to logs could exploit this vulnerability by retrieving and misusing the exposed session...