agent-vault-proxy

Keys on the Wire 당신의 AI 에이전트는 API 키를 절대 보유하지 않습니다. 플레이스홀더를 보내고, 실제 비밀값은 전송 중에 교체됩니다. 자격 증명 탈취 도구Shai-Hulud 및 유사 도구와 프롬프트 인젝션 에이전트가 당신의 비밀을 유출하는 것을 차단합니다. 손상된 에이전트는 가져갈 것이 없습니다. 작동 방식 1. 에이전트가 플레이스홀더 를 포함한 요청을 보냅니다. 실제 키가 아닙니다. 2. Keys on the Wire가 전송 중에 볼트에서 실제 비밀값을 교체합니다. 3. 에이전트는 키를 절대 볼 수 없습니다...

CVE-2026-89064

The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to Insufficient Credential Protection in versions up to, and including, 7.110. This is due to the Ai1wmMainController::init method — registered on the admininit hook, which fires unauthenticated on admin-ajax.php and...

CVE-2026-89064

All-in-One WP Migration and Backup for WordPress (≤ 7.110 ) contains an unauthenticated Insufficient Credential Protection flaw discovered by Jakub Herman. The Ai1wm_Main_Controller::init() method, registered on the admin_init hook, reads $_SERVER['PHP_AUTH_USER'] and $_SERVER['PHP_AUTH_PW'] from...

EUVD-2026-81315

The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to Insufficient Credential Protection in versions up to, and including, 7.110. This is due to the Ai1wmMainController::init method — registered on the admininit hook, which fires unauthenticated on admin-ajax.php and...

WordPress All-in-One WP Migration and Backup plugin <= 7.110 - Unauthenticated Insufficient Credential Protection vulnerability

Unauthenticated Insufficient Credential Protection vulnerability discovered by Jakub Herman in WordPress Plugin All-in-One WP Migration versions = 7.110...

EUVD-2026-77239

Insufficiently protected credentials issue exists in Remote I/O Coupler Unit Server Type CPSN-MCB271-. If this vulnerability is exploited, sensitive information may be restored from a backup file...

CVE-2026-78627

Okta Hyperdrive Integration installer exposes the OAuth client secret in plaintext when it is passed as an MSI property. The credential is recorded in three locations readable by an authenticated local user: the installer log , the Application Event Log , and the process command line . The CVSS 3...

CVE-2026-78627 Improper Credential Protection in Okta Hyperdrive Integration Installer Logging

The Okta Hyperdrive Integration installer does not mask the OAuth client secret when passed as an MSI property. The credential is recorded in plaintext in the installer log, the Application Event Log, and the process command line, all of which are readable by an authenticated local user on the...

CVE-2026-77909

Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to disclose information over a network...

CVE-2026-64918

Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network...

EUVD-2026-73643

Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-64918

CVE-2026-64918 is a spoofing vulnerability in Microsoft Office caused by insufficiently protected credentials , allowing an unauthorized attacker to perform spoofing over a network. The attack requires user interaction but needs no prior privileges and has low complexity , with a high impact on c...

EUVD-2026-73337

Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...

EUVD-2026-73295

Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to disclose information over a network...

GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability

Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...

Security Bulletin: Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access

Summary Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access Vulnerability Details CVEID:CVE-2026-11927 DESCRIPTION: IBM Security Verify Identity Access reverse proxy may allow parameters to be injected in requests to third party services...

CVE-2026-65087

NVIDIA NemoClaw contains a vulnerability where an attacker could cause insufficiently protected credentials . A successful exploit of this vulnerability might lead to information disclosure and data tampering...

EUVD-2026-66105

NVIDIA NemoClaw contains a vulnerability where an attacker could cause insufficiently protected credentials . A successful exploit of this vulnerability might lead to information disclosure and data tampering...

CVE-2026-20359 Cisco Crosswork Security Hardening Release: August 2026

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

PT-2026-78502

Name of the Vulnerable Software and Affected Versions Cisco Crosswork affected versions not specified Description Multiple issues related to insufficiently protected credentials were identified during an internal security review. These issues fall under the category of CWE-522, which refers to th...