CVE-2026-64741: Exposure of Sensitive Information to an Unauthorized Actor

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.6 and iPadOS 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to read a persistent device identifier...

CVE-2026-43775: Improper Authorization

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. An app may be able to access sensitive user data...

CVE-2026-43770: Concurrent Execution using Shared Resource with Improper Synchronization

A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6. An app may be able to access sensitive user data...

CVE-2026-17612: Exposure of Sensitive Information to an Unauthorized Actor

Honeywell S35 Series 3M/5M/8M/PinHole Cameras, all versions prior to and including version HC5.26.1.14.20260207 contains an audit log disclosure Vulnerability that could allow an attacker to access audit logs without authentication, potentially resulting in the disclosure of sensitive information...

CVE-2026-66438: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Unauthenticated Sensitive Data Exposure in Exclusive Addons Elementor = 2.8.0 versions...

CVE-2026-43760: Improper Access Control

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6, macOS Tahoe 26.7. An app may be able to access user-sensitive data...

CVE-2026-43759: Exposure of Sensitive Information to an Unauthorized Actor

An authorization issue was addressed with improved state management. This issue is fixed in macOS Tahoe 26.6, watchOS 26.6. An app may be able to access sensitive user data...

CVE-2026-20672: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure issue was addressed with improved privacy controls. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.3. An app may be able to access sensitive user data...

CVE-2026-59548: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Unauthenticated Sensitive Data Exposure in Byteflows Travel & Hotel Booking = 1.0.0 versions...

CVE-2026-65564: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Unauthenticated Sensitive Data Exposure in MapPress Maps for WordPress = 2.97.6 versions...

CVE-2026-65434: Insertion of Sensitive Information Into Sent Data

Subscriber Sensitive Data Exposure in ЮKassa для WooCommerce = 2.16.1 versions...

CVE-2026-59528: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Subscriber Sensitive Data Exposure in ShipTime: Discounted Shipping Rates = 1.1.1 versions...

Siemens SIMATIC S7-1500 CPU 1518 MFP Exposure of Sensitive Information Due to Incompatible Policies (CVE-2025-39955)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505852; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate",...

Siemens SIMATIC S7-1500 CPU 1518 MFP Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution (CVE-2024-28956)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505617; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate",...

ROS-20260727-73-0009

A vulnerability in apache-activemq related to flaws in the authorization process. Exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to sensitive information...

Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Fortinet FortiOS contains an exposure of sensitive information to an unauthorized actor vulnerability. This may allow a remote unauthenticated attacker to bypass the patch developed for the symbolic link persistency mechanism observed in some post-exploit cases, via crafted HTTP requests. An...

PT-2026-65165

Name of the Vulnerable Software and Affected Versions macOS versions prior to 26.6 watchOS versions prior to 26.6 Description An authorization issue exists due to improper state management, which could allow an app to access sensitive user data. Recommendations Update macOS to version 26.6. Updat...

ROS-20260727-73-0023

A vulnerability in httpd related to information disclosure in an invalid data area. Exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to sensitive information...

Sensitive Information Disclosure

electron-updater is vulnerable to Sensitive Information Disclosure. The vulnerability is due to improper handling of credential-bearing HTTP headers during cross-origin redirects, which allows an attacker to obtain sensitive authentication tokens by redirecting update requests to an...

Sensitive Information Exposure

Next.js is vulnerable to Sensitive Information Exposure. The vulnerability is due to exposure of Server Action identifiers in publicly served client artifacts, allowing unauthenticated attackers to discover protected Server Action endpoints and bypass authentication through endpoint enumeration...