CVE-2026-82755 ash_authentication_oauth2_server serves tenant-specific OAuth metadata as publicly cacheable without Vary, enabling cross-tenant confusion

Use of Cache Containing Sensitive Information vulnerability in ash-project ashauthenticationoauth2server allows a shared HTTP cache to serve one tenant's OAuth discovery metadata to another tenant's clients. The RFC 8414 and RFC 9728 metadata endpoints in...

EEF-CVE-2026-82755 ash_authentication_oauth2_server serves tenant-specific OAuth metadata as publicly cacheable without Vary, enabling cross-tenant confusion

Summary Use of Cache Containing Sensitive Information vulnerability in ash-project ashauthenticationoauth2server allows a shared HTTP cache to serve one tenant's OAuth discovery metadata to another tenant's clients. The RFC 8414 and RFC 9728 metadata endpoints in...

CVE-2026-80058

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Cleartext Storage of Sensitive Information vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information...

CVE-2026-80058

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Cleartext Storage of Sensitive Information vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information...

CVE-2026-80058

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Cleartext Storage of Sensitive Information vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information...

CVE-2026-80058

Dell Secure Connect Gateway (SCG) 5.0 contains a Cleartext Storage of Sensitive Information vulnerability in both the Appliance (versions prior to 5.36.00.16 ) and Application (versions prior to 5.36.00.00 ). A low-privileged attacker with local access could exploit this flaw to expose sensitive ...

CVE-2026-80056

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to informati...

Arbitrary Command Injection

Overview librenms/librenms is a fully featured network monitoring system that provides a wealth of features and device support. Affected versions of this package are vulnerable to Arbitrary Command Injection via the graphtitle parameter. An attacker can inject arbitrary arguments into the rrdtool...

EUVD-2026-72461

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to informati...

CVE-2026-80056

Dell Secure Connect Gateway (SCG) 5.0 is affected by an Insertion of Sensitive Information into Log File vulnerability. A low-privileged attacker with local access could potentially exploit this flaw, leading to information exposure (high confidentiality impact; no integrity or availability impac...

CVE-2026-80056

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to informati...

Sensitive Information Disclosure

org.springframework, spring-webflux is vulnerable to sensitive information disclosure. The vulnerability is due to request headers being included in the exception reason when handling WebSocket connections, which allows an attacker to potentially obtain indirectly sensitive user information by...

CVE-2026-54171

A flaw was found in Excon, a Ruby HTTP client library. The RedirectFollower middleware, responsible for handling redirects, failed to remove sensitive header information when a request was redirected to a new target. This oversight could lead to the unintended exposure of confidential data to an...

Sensitive Data Logging

Spring Cloud Function is vulnerable to Sensitive Data Logging. The vulnerability is due to insufficient redaction of sensitive information in its logging mechanisms, where request or response data may be written to logs without filtering and attackers can trigger the function with secret‑containi...

CVE-2026-86280

A vulnerability was identified in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This affects an unknown function of the file cictportal.sql. Such manipulation leads to cleartext storage of sensitive information. It is possible to launch the attack remotely. The...

CVE-2026-86280

SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0 contains a cleartext storage vulnerability in the cict_portal.sql file, allowing remote, unauthenticated attackers to access sensitive information with low confidentiality impact. A proof-of-concept exploit is publicly a...

EUVD-2026-72274

A vulnerability was identified in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This affects an unknown function of the file cictportal.sql. Such manipulation leads to cleartext storage of sensitive information. It is possible to launch the attack remotely. The...

CVE-2026-86280 SourceCodester Syllabus-Aligned Learning Management & Examination System cict_portal.sql cleartext storage

A vulnerability was identified in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This affects an unknown function of the file cictportal.sql. Such manipulation leads to cleartext storage of sensitive information. It is possible to launch the attack remotely. The...

The vulnerability of the command-line interface of data storage software Infinispan allows attackers to exploit it to disclose sensitive information.

The vulnerability of the command-line interface of data storage software called Infinispan is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability can allow attackers to disclose sensitive information that should be protected...

PT-2026-86841

Name of the Vulnerable Software and Affected Versions Dell SCG 5.0 Appliance versions prior to 5.36.00.16 Dell SCG 5.0 Application versions prior to 5.36.00.00 Description Sensitive information is stored in cleartext, which could allow a low privileged attacker with local access to cause...