CVE-2026-59301: Insertion of Sensitive Information into Log File

Potential for logging sensitive data in Spring Cloud Function Azure. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7...

CVE-2026-59302: Insertion of Sensitive Information into Log File

Potential for logging sensitive data in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...

PT-2026-82629

Affected versions of Flowintel incorrectly attempted to validate login email addresses by calling Emailemail. That does not perform WTForms field validation; it merely constructs a validator object. Consequently, malformed attacker-controlled email input could continue through the login process a...

PT-2026-82710

Potential for logging sensitive data in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...

CVE-2026-21808

HCL BigFix Quantum Risk Analyzer generates highly detailed logging information by default which increases the risk of sensitive data leakage and can provide an attacker with internal application logic and architectural details...

CVE-2026-21808

HCL BigFix Quantum Risk Analyzer generates highly detailed logging information by default, which can expose sensitive data and reveal internal application logic and architectural details to an attacker. The flaw is scored CVSS 4.1 (MEDIUM) , requiring a local attack with high complexity and high ...

CVE-2026-21808 HCL BigFix Quantum Risk Analyzer is affected by logging sensitive information

HCL BigFix Quantum Risk Analyzer generates highly detailed logging information by default which increases the risk of sensitive data leakage and can provide an attacker with internal application logic and architectural details...

CVE-2026-21808 HCL BigFix Quantum Risk Analyzer is affected by logging sensitive information

HCL BigFix Quantum Risk Analyzer generates highly detailed logging information by default which increases the risk of sensitive data leakage and can provide an attacker with internal application logic and architectural details...

CVE-2026-58070

A vulnerability that records guest OS processing credentials in cleartext in a support log on the guest, allowing a user with read access to that log to recover privileged account credentials...

CLSA-2026-1787726168 TuxCare security update for org.apache.logging.log4j (4 CVEs)

TuxCare rebuilt 30 org.apache.logging.log4j packages to address 4 CVEs. Fixed in 2.24.3-tuxcare.2...

PT-2026-82276

『A vulnerability that causes guest OS credentials used for Application Aware processing to be recorded in cleartext in logs on the guest machine.』 CVE-2026-58070 Severity: Medium KB4902: Vulnerability Resolved in Veeam Backup & Replication 13.1 https://t.co/FR1ctYoEZc...

PT-2026-82330

Name of the Vulnerable Software and Affected Versions HCL BigFix Quantum Risk Analyzer affected versions not specified Description The software generates highly detailed logging information by default. This behavior increases the risk of sensitive data leakage and may allow an attacker to gain...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-061546)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-061546 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Logging. Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098977)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098977 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: always detect conflicting inodes when logging inode refs After rename exchanging either...

PT-2026-82340

Name of the Vulnerable Software and Affected Versions community.general Ansible collection affected versions not specified Description A flaw exists in the ipa getkeytab module where the bind pw parameter, used for LDAP simple-bind passwords during Kerberos keytab retrieval, lacks the no log...

EUVD-2026-54678

JupyterHub has Unauthenticated Denial of Service via Unbounded Username Logging on Failed Login...

GHSA-P43P-WHWX-Q52H JupyterHub has Unauthenticated Denial of Service via Unbounded Username Logging on Failed Login

Impact Invalid input to login resulted in unbounded logging output. Only form-based Authenticators the default PAM Authenticator, but not the more widely used OAuthenticator are affected. Patches Upgrade to 5.5.0. Workarounds Use an Authenticator that doesn't use a login form, such as...

JupyterHub has Unauthenticated Denial of Service via Unbounded Username Logging on Failed Login

Impact Invalid input to login resulted in unbounded logging output. Only form-based Authenticators the default PAM Authenticator, but not the more widely used OAuthenticator are affected. Patches Upgrade to 5.5.0. Workarounds Use an Authenticator that doesn't use a login form, such as...

Vulnerability Resolved in Veeam Backup & Replication 13.1

Veeam Software Security Commitment Veeam® is committed to ensuring its products protect customers from potential risks. As part of that commitment, we operate a Vulnerability Disclosure Program VDP for all Veeam products and perform extensive internal code audits. When a vulnerability is...

JetBrains TeamCity < 2022.04.4 (CVE-2022-40979)

The version of JetBrains TeamCity installed on the remote host is prior to 2022.04.4. It is, therefore, affected by a vulnerability: - In JetBrains TeamCity before 2022.04.4 environmental variables of password type could be logged when using custom Perforce executable CVE-2022-40979 Note that...