PT-2026-71413

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-359: Exposure of Private Personal Information to an Unauthorized Actor...

PT-2026-71556

Subscriber Sensitive Data Exposure in Payment Forms for Paystack = 4.0.5 versions...

PT-2026-71555

Unauthenticated Sensitive Data Exposure in REST API Log = 1.7.1 versions...

PT-2026-71552

Subscriber Sensitive Data Exposure in WPJAM Basic = 7.0.2.1 versions...

PT-2026-71598

Unauthenticated Sensitive Data Exposure in KiviCare = 4.5.1 versions...

CVE-2026-16713: Binding to an Unrestricted IP Address

IBM Documentation Offline 1.0.0 through 1.4.1 IBM Documentation could allow a remote attacker to obtain sensitive information due to a security misconfiguration where the documentation server binds to an unrestricted IP address...

CVE-2026-59503: Exposure of Sensitive Information to an Unauthorized Actor

: Exposure of Sensitive Information to an Unauthorized Actor : Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Priority Portal Generator addon to Priority ERP developed by Soft Solutions. This issue affects Portal Generator addon to Priority ERP developed by Sof...

CVE-2026-0290: Insufficiently Protected Credentials

An information disclosure vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a local attacker to view sensitive data...

CVE-2026-66432: Exposure of Sensitive System Information Due to Uncleared Debug Information

Subscriber Sensitive Data Exposure in WPJAM Basic = 7.0.2.1 versions...

CVE-2026-66463: Insertion of Sensitive Information Into Sent Data

Unauthenticated Sensitive Data Exposure in iCARRY = 2.9 versions...

PT-2026-71409

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2026-66443: Insertion of Sensitive Information Into Sent Data

Unauthenticated Sensitive Data Exposure in REST API Log = 1.7.1 versions...

CVE-2026-50105: Exposure of Sensitive Information to an Unauthorized Actor

RSS/Atom feed handlers bypass API-token scope & public-only confinement incomplete fix of 37698...

CVE-2026-58432: Exposure of Sensitive Information to an Unauthorized Actor

Missing Authorization and Authorization Bypass Through User-Controlled Key and Incorrect Permission Assignment for Critical Resource and Exposure of Sensitive Information to an Unauthorized Actor in code.gitea.io/gitea...

CVE-2026-16871: Out-of-bounds Write

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a heap buffer overflow...

PT-2026-71523

Customer Sensitive Data Exposure in WP Event SOlution = 4.1.18 versions...

PT-2026-71842

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Improper authentication may allow a remote attacker to execute arbitrary code or obtain sensitive information. Recommendations At the moment, there is no information about a newer version that contain...

CVE-2026-65933: Buffer Over-read

A malformed Bluetooth connection request message can cause the BT122 to leak potentially sensitive information. See vulnerability B-E4 in the related paper below...

CVE-2026-59507: Use of Hard-coded Credentials

: Use of Hard-coded Credentials : Exposure of Sensitive Information to an Unauthorized Actor : Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP developed by Soft Solutions. This issue affects Portal Generator addon to Priority ERP developed by Soft Solution...

Vulnerability of the kerberos_DecryptMessage() function in the winpr/libwinpr/sspi/Kerberos/kerberos.c file of the RDP client FreeRDP, which allows a intruder to disclose sensitive information and cause a denial-of-service attack.

The vulnerability of the kerberosDecryptMessage function in the winpr/libwinpr/sspi/Kerberos/kerberos.c file is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to disclose sensitive information and cause denial-of-service attacks...