CVE-2026-12735

IBM Controller Disclosure Management 1.0.0.0 is vulnerable to a information disclosure flaw where an attacker can obtain sensitive EXIF metadata from uploaded images. The root cause is the improper removal of sensitive information before storage (CWE-212). The vulnerability has a CVSS 3.1 base sc...