EUVD-2026-19697
GHSA-xm23-f7v4-5j82
Severity by source
AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
4DescriptionCVE.org
An issue that could allow an authorized user to view the clear-text secrets for a subset of credential types and fields has been resolved. This is an instance of CWE-522: Insufficiently Protected Credentials, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N (5.3 Medium). This issue was fixed in version 4.0.260204.2 of the runZero Platform.
AnalysisAI
runZero Platform versions prior to 4.0.260204.2 expose cleartext secrets for a subset of credential types and fields to authorized users due to insufficient credential protection, allowing users with legitimate platform access to view sensitive authentication data they should not be able to access. The vulnerability requires user interaction and has a CVSS score of 5.3 (Medium) with high confidentiality impact but no active exploitation or public exploit code identified at time of analysis.
Technical ContextAI
The vulnerability stems from CWE-863 (Incorrect Authorization) combined with CWE-522 (Insufficiently Protected Credentials), indicating that the runZero Platform fails to properly restrict access to stored credential data. Rather than a cryptographic failure, this appears to be an authorization bypass where the application exposes cleartext secrets through its interface to users who have general platform access but lack the specific authorization to view sensitive credential fields. The affected CPE cpe:2.3:a:runzero:platform:*:*:*:*:*:*:*:* indicates all versions of the runZero Platform below the patched release are vulnerable, suggesting the flaw existed across the product line until the specific remediation was applied.
RemediationAI
Vendor-released patch: Upgrade to runZero Platform version 4.0.260204.2 or later. This is the confirmed fixed version that resolves the cleartext credential exposure. Users unable to immediately upgrade should review and restrict access to the runZero Platform for non-administrative users, particularly those who do not require access to credential management features, to reduce the attack surface. Detailed guidance is available in the runZero release notes at https://help.runzero.com/docs/release-notes/#402602042.
Server-side request forgery in Huly Platform's /import endpoint allows authenticated workspace users to coerce the front
Affected 1E Platform versions have a Blind SQL Injection vulnerability that can lead to arbitrary code execution. Rated
Orchid is a Laravel package that allows application development of back-office applications, admin/user panels, and dash
Pega Platform before version 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the comment tags.
The Richtext Editor in Pega Platform before 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability. Rate
Improper privilege management in runZero Platform allows organization administrators to escalate privileges to superuser
Improper link resolution before file access in the Nomad module of the 1E Client, in versions prior to 25.3, enables an
Incorrect access control in the component ApiPayController.java of platform v1.0.0 allows attackers to access sensitive
Incorrect access control in the component orderService.queryObject of platform v1.0.0 allows attackers to access sensiti
Incorrect access control in the component ApiOrderService.java of platform v1.0.0 allows attackers to access sensitive i
The 1E-Exchange-DisplayMessageinstruction that is part of the End-User Interaction product pack available on the 1E Exch
The 1E-Exchange-CommandLinePing instruction that is part of the Network product pack available on the 1E Exchange does n
Same weakness CWE-863 – Incorrect Authorization
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today