Lucene search
+L

8 matches found

NVD
NVD
added 2026/07/30 7:17 p.m.11 views

CVE-2026-15977

SGLang contains a credential leakage vulnerability in the /serverinfo endpoint, which will return API keys and SSL keyfile information when only the --admin-api-key is configured...

7.5CVSS0.00241EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/30 6:7 p.m.8 views

CVE-2026-15977

SGLang contains a credential leakage vulnerability in the /serverinfo endpoint, which will return API keys and SSL keyfile information when only the --admin-api-key is configured...

5.9AI score0.00241EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/30 6:7 p.m.6 views

CVE-2026-15977 CVE-2026-15977

SGLang contains a credential leakage vulnerability in the /serverinfo endpoint, which will return API keys and SSL keyfile information when only the --admin-api-key is configured...

7.5CVSS5.9AI score
SaveExploits0References4
CVE
CVE
added 2026/07/30 6:7 p.m.42 views

CVE-2026-15977

SGLang contains a credential leakage vulnerability tracked as CVE-2026-15977 affecting the /server_info endpoint. When only the --admin-api-key is configured, the endpoint may disclose API keys and SSL keyfile information. Impact is exposure of sensitive credentials, with CVSS 3.1 details indicat...

7.5CVSS5.9AI score0.00241EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/07/30 12:0 a.m.18 views

PT-2026-66562

Name of the Vulnerable Software and Affected Versions SGLang affected versions not specified Description An issue exists where the '/server info' endpoint returns sensitive API keys and SSL keyfile information. This occurs specifically when only the --admin-api-key is configured. Recommendations ...

7.5CVSS5.4AI score0.00241EPSS
SaveExploits0References6
CVE
CVE
added 2025/06/20 4:4 p.m.43 views

CVE-2025-5416

CVE-2025-5416 concerns Keycloak exposing sensitive environment information via the authenticated-accessible endpoint /admin/serverinfo . Multiple sources describe an information-disclosure flaw that can reveal internal server details when an authenticated user accesses the endpoint. The NVD and R...

2.7CVSS6.2AI score0.00239EPSS
SaveExploits0References2Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2023/11/26 12:0 a.m.8 views

VulnCheck KEV: CVE-2018-11409

Splunk through 7.0.1 allows information disclosure by appending raw/services/server/info/server-info?outputmode=json to a query, as demonstrated by discovering a license key...

5.3CVSS6AI score0.98314EPSS
SaveExploits7References1
CNVD
CNVD
added 2018/06/11 12:0 a.m.8 views

Splunk Information Disclosure Vulnerability

Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. The software is primarily used to collect, index and analyze machine-generated data, including data generated by all IT systems and infrastructures physical, virtual and cloud. A security...

5.3CVSS6.5AI score0.98314EPSS
SaveExploits7References1
Rows per page
Query Builder