EUVD-2026-57770

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-359: Exposure of Private Personal Information to an Unauthorized Actor...

PT-2026-71809

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and potentially obtain sensitive information due to a stack-based buffer overflow...

PT-2026-71556

Subscriber Sensitive Data Exposure in Payment Forms for Paystack = 4.0.5 versions...

PT-2026-71552

Subscriber Sensitive Data Exposure in WPJAM Basic = 7.0.2.1 versions...

PT-2026-71555

Unauthenticated Sensitive Data Exposure in REST API Log = 1.7.1 versions...

CVE-2026-66443: Insertion of Sensitive Information Into Sent Data

Unauthenticated Sensitive Data Exposure in REST API Log = 1.7.1 versions...

CVE-2026-66463: Insertion of Sensitive Information Into Sent Data

Unauthenticated Sensitive Data Exposure in iCARRY = 2.9 versions...

CVE-2026-66462: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Unauthenticated Sensitive Data Exposure in WooCommerce Appointments = 5.3.8 versions...

CVE-2026-66444: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Subscriber Sensitive Data Exposure in Payment Forms for Paystack = 4.0.5 versions...

CVE-2026-66432: Exposure of Sensitive System Information Due to Uncleared Debug Information

Subscriber Sensitive Data Exposure in WPJAM Basic = 7.0.2.1 versions...

PT-2026-71598

Unauthenticated Sensitive Data Exposure in KiviCare = 4.5.1 versions...

PT-2026-71568

Unauthenticated Sensitive Data Exposure in WooCommerce Appointments = 5.3.8 versions...

PT-2026-71413

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-359: Exposure of Private Personal Information to an Unauthorized Actor...

CVE-2026-28174: Insertion of Sensitive Information Into Sent Data

Customer Sensitive Data Exposure in WP Event SOlution = 4.1.18 versions...

PT-2026-71523

Customer Sensitive Data Exposure in WP Event SOlution = 4.1.18 versions...

PT-2026-71569

Unauthenticated Sensitive Data Exposure in iCARRY = 2.9 versions...

CVE-2026-18097 IBM® Db2® federated server could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files.

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files...

CVE-2026-17110 IBM i is Affected By Multiple Vulnerabilities in SQL

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands and obtain sensitive information due to improper privilege management...

CVE-2026-17266

IBM i (7.6, 7.5, 7.4, 7.3) is affected by CVE-2026-17266 in Navigator for i, a path traversal flaw that could allow a remote authenticated attacker to obtain sensitive information by improper limitation of a pathname to a restricted directory. CVSS base 6.5 (Network, Low attacker effort, Privileg...

CVE-2026-68970 Apache Airflow: Values of a list-shaped Variable are not masked in task logs and the Rendered Templates UI

Apache Airflow's Task SDK did not mask the contents of a Variable whose JSON value is a list, so secrets stored in that shape appeared in cleartext in task logs and in the Rendered Templates UI. Masking was applied only when the deserialized value was a string or a dict; a list at the top level...