Monthly
Information disclosure in NetApp Trident v25.02.1 through v26.06.1 allows an authenticated local attacker with read access to debug logs to obtain LUKS passphrases or SMB Active Directory credentials. The vulnerability only manifests when debug logging is enabled and the affected features (LUKS-encrypted volumes and/or SMB shares joined to AD) are in use, requiring a low-privilege foothold on the host. No public exploit or active exploitation has been identified, and the attack is configuration-gated, making the real-world risk non-urgent despite a CVSS score of 8.2.
Misconfigured Laravel debug mode in the hosted Cadmos LTI application at cadmos.eummena.io exposes the entire server environment - the full plaintext .env file with database credentials, application keys, and third-party service secrets - to any remote attacker who can trigger an unhandled exception with a single GET request. No authentication or user interaction is required (CVSS 4.0 base 9.2; independent assessment CVSS 3.1 9.2, AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N), but the issue is configuration-dependent rather than a default-everywhere flaw: only deployments left with APP_DEBUG=true and APP_ENV=local in a publicly reachable environment are exploitable. The operator remediated the affected hosted instance on or before 2026-09-02, and no public exploit code has been identified at time of analysis.
Unauthenticated information disclosure in SiYuan before 3.7.4 exposes Go net/http/pprof debug endpoints (heap, goroutine, and related dumps) to any remote client whenever the application is not started with --mode set exactly to prod. Because non-prod is the effective default, attackers can query /debug/pprof/heap to scrape live process memory and recover secrets such as the AccessAuthCode and configured AI provider API keys. Reported by VulnCheck with a vendor patch available; no public exploit identified at time of analysis.
Information disclosure in SUSE Rancher AI Agent 1.0 before 1.0.2 writes API keys and raw LLM response text (which may contain sensitive data) into logfiles when the DEBUG loglevel is enabled, letting a local attacker with access to those logs harvest credentials and confidential model output. Rated CVSS 4.0 base 7.0, the flaw requires local access and high privileges plus a non-default debug configuration. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
METIS WIC devices expose an unauthenticated /dbviewer/ endpoint that permits remote attackers to directly access and export internal SQLite databases containing sensitive operational telemetry. The affected Golang and Django applications run with debug mode enabled, causing error responses to leak backend source code, local file paths, and system configuration details. No patch is currently available.
Local information disclosure in MediaTek Modem firmware affects devices built on more than 80 MediaTek chipset models, including MT6983, MT6895, MT6989, and MT6768, when running unpatched modem firmware. A local app with ordinary low privileges (PR:L) can access sensitive modem debug information without user interaction, yielding high confidentiality impact but no code execution or integrity/availability loss; CVSS is 5.5 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). No public exploit code has been identified at time of analysis, and there is no CISA KEV entry indicating confirmed active exploitation, but MediaTek patch MOLY01645293 and the October 2026 product security bulletin address the flaw.
Samsung Exynos camera driver firmware on eight mobile processor variants leaks sensitive information through debug instrumentation that was not removed from production builds (CWE-215). The flaw affects Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680 SoCs - processors found in Samsung Galaxy smartphones and tablets - allowing a local low-privileged attacker to read sensitive data that crosses the kernel-to-userspace security boundary. No public exploit code exists and the vendor-assigned CVSS score of 2.8 (Low) accurately reflects the narrow, local-only attack surface and limited confidentiality impact.
Sensitive information exposure in Dell Secure Connect Gateway (SCG) 5.0 - both Appliance and Application deployment variants - results from debugging code retained in production builds that exposes confidential data to locally authenticated low-privileged users. The flaw covers Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00, with patches available under Dell Security Advisory DSA-2026-382. No public exploit code or active exploitation has been identified at time of analysis.
Unstripped debug symbols in Siemens Reyrolle 7SR5 protection relay firmware (all versions prior to V2.70) expose internal function names, type definitions, and structure layouts to any party who downloads the publicly available firmware update packages. This does not directly compromise deployed devices but substantially reduces the skill and effort required for an attacker to identify exploitable weaknesses through static firmware analysis. No public exploit or active exploitation has been identified; Siemens has released firmware V2.70 as the fix per advisory SSA-142885.
HCL Hive exposes its Swagger API documentation publicly to unauthenticated users, revealing API endpoint structures, HTTP methods, request/response schemas, and operational surface without access controls. While no credentials or PII are directly disclosed per the vendor's assessment, the exposed documentation materially reduces the reconnaissance effort required for follow-on attacks against the API. No public exploit code exists and this vulnerability is not listed in the CISA KEV catalog, placing it in the lower-priority tier despite its network-accessible nature.
Information disclosure in NetApp Trident v25.02.1 through v26.06.1 allows an authenticated local attacker with read access to debug logs to obtain LUKS passphrases or SMB Active Directory credentials. The vulnerability only manifests when debug logging is enabled and the affected features (LUKS-encrypted volumes and/or SMB shares joined to AD) are in use, requiring a low-privilege foothold on the host. No public exploit or active exploitation has been identified, and the attack is configuration-gated, making the real-world risk non-urgent despite a CVSS score of 8.2.
Misconfigured Laravel debug mode in the hosted Cadmos LTI application at cadmos.eummena.io exposes the entire server environment - the full plaintext .env file with database credentials, application keys, and third-party service secrets - to any remote attacker who can trigger an unhandled exception with a single GET request. No authentication or user interaction is required (CVSS 4.0 base 9.2; independent assessment CVSS 3.1 9.2, AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N), but the issue is configuration-dependent rather than a default-everywhere flaw: only deployments left with APP_DEBUG=true and APP_ENV=local in a publicly reachable environment are exploitable. The operator remediated the affected hosted instance on or before 2026-09-02, and no public exploit code has been identified at time of analysis.
Unauthenticated information disclosure in SiYuan before 3.7.4 exposes Go net/http/pprof debug endpoints (heap, goroutine, and related dumps) to any remote client whenever the application is not started with --mode set exactly to prod. Because non-prod is the effective default, attackers can query /debug/pprof/heap to scrape live process memory and recover secrets such as the AccessAuthCode and configured AI provider API keys. Reported by VulnCheck with a vendor patch available; no public exploit identified at time of analysis.
Information disclosure in SUSE Rancher AI Agent 1.0 before 1.0.2 writes API keys and raw LLM response text (which may contain sensitive data) into logfiles when the DEBUG loglevel is enabled, letting a local attacker with access to those logs harvest credentials and confidential model output. Rated CVSS 4.0 base 7.0, the flaw requires local access and high privileges plus a non-default debug configuration. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
METIS WIC devices expose an unauthenticated /dbviewer/ endpoint that permits remote attackers to directly access and export internal SQLite databases containing sensitive operational telemetry. The affected Golang and Django applications run with debug mode enabled, causing error responses to leak backend source code, local file paths, and system configuration details. No patch is currently available.
Local information disclosure in MediaTek Modem firmware affects devices built on more than 80 MediaTek chipset models, including MT6983, MT6895, MT6989, and MT6768, when running unpatched modem firmware. A local app with ordinary low privileges (PR:L) can access sensitive modem debug information without user interaction, yielding high confidentiality impact but no code execution or integrity/availability loss; CVSS is 5.5 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). No public exploit code has been identified at time of analysis, and there is no CISA KEV entry indicating confirmed active exploitation, but MediaTek patch MOLY01645293 and the October 2026 product security bulletin address the flaw.
Samsung Exynos camera driver firmware on eight mobile processor variants leaks sensitive information through debug instrumentation that was not removed from production builds (CWE-215). The flaw affects Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680 SoCs - processors found in Samsung Galaxy smartphones and tablets - allowing a local low-privileged attacker to read sensitive data that crosses the kernel-to-userspace security boundary. No public exploit code exists and the vendor-assigned CVSS score of 2.8 (Low) accurately reflects the narrow, local-only attack surface and limited confidentiality impact.
Sensitive information exposure in Dell Secure Connect Gateway (SCG) 5.0 - both Appliance and Application deployment variants - results from debugging code retained in production builds that exposes confidential data to locally authenticated low-privileged users. The flaw covers Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00, with patches available under Dell Security Advisory DSA-2026-382. No public exploit code or active exploitation has been identified at time of analysis.
Unstripped debug symbols in Siemens Reyrolle 7SR5 protection relay firmware (all versions prior to V2.70) expose internal function names, type definitions, and structure layouts to any party who downloads the publicly available firmware update packages. This does not directly compromise deployed devices but substantially reduces the skill and effort required for an attacker to identify exploitable weaknesses through static firmware analysis. No public exploit or active exploitation has been identified; Siemens has released firmware V2.70 as the fix per advisory SSA-142885.
HCL Hive exposes its Swagger API documentation publicly to unauthenticated users, revealing API endpoint structures, HTTP methods, request/response schemas, and operational surface without access controls. While no credentials or PII are directly disclosed per the vendor's assessment, the exposed documentation materially reduces the reconnaissance effort required for follow-on attacks against the API. No public exploit code exists and this vulnerability is not listed in the CISA KEV catalog, placing it in the lower-priority tier despite its network-accessible nature.