2 matches found
CVE-2026-92759 SecObserve before 1.59.1 Information Disclosure via API Configuration
SecObserve versions before 1.59.1 contain an information disclosure vulnerability in the ApiConfigurationSerializer that fails to strip the basicauthpassword field from API configuration responses. View-only product members can retrieve the decrypted basic-auth password of configured scanner or...
7.1CVSS5.7AI score0.00462EPSS
SaveExploits0References6
EUVD-2026-81027
SecObserve versions before 1.59.1 contain an information disclosure vulnerability in the ApiConfigurationSerializer that fails to strip the basicauthpassword field from API configuration responses. View-only product members can retrieve the decrypted basic-auth password of configured scanner or...
7.1CVSS5.8AI score0.00462EPSS
SaveExploits0References6
20