Monthly
Yamaha wireless LAN router NWR100 stores sensitive information insecurely in configuration files produced by its CONFIG file export function, and those exported files can be read by an unauthenticated attacker, exposing their contents. Affected units are NWR100 devices running firmware Rev.26.00.07 and earlier (tracked as CPE cpe:2.3:a:yamaha_corporation:nwr100, advisory JVNVU91027179), and the impact is confidentiality-only - no integrity or availability effect is described. The CVSS 4.0 base score is 7.1 and the vendor-side assessment corresponds to CVSS 3.1 7.1 (AV:N/AC:L/PR:N/UI:R/C:H/I:N/A:N); no public exploit code and no confirmed active exploitation are identified in the available data, and the JVN/Yamaha advisories should be treated as the primary source for update guidance.
Insecure storage of sensitive information in Progress MOVEit Transfer allows an authenticated low-privilege local user to recover confidential material - most plausibly stored credentials, keys, or configuration secrets - from the MOVEit Transfer host, as reflected by the assessed CVSS 3.1 vector AV:L/AC:L/PR:L/UI:R/C:H, which requires local presence, a valid account, and user interaction. Affected builds are MOVEit Transfer before 2025.1.6 and 2026.0.0 through 2026.0.3, with remediation in 2025.1.6 and 2026.0.4 per the Progress September 2026 security bulletin. There is no public exploit identified at time of analysis and the issue is not confirmed actively exploited (CISA KEV); note that the authoritative independent assessment rates the impact as confidentiality-only (C:H/I:N/A:N), not the integrity and availability impact implied by the 7.3 base score in the raw feed.
Information disclosure in Brocade SANnav before 2.4.0b and 3.0.0 occurs because the product writes encoded passwords and authentication tokens to log files, including the SANnav supportsave diagnostic bundle. An attacker who gains access to those logs or the supportsave output can recover secrets and potentially reuse them, though the description frames this as requiring an authenticated attacker with file-level access and the assessed vector reflects a local/authenticated prerequisite; the input CVSS 4.0 vector lists PR:N, a discrepancy that should be confirmed with the vendor. No public exploit identified at time of analysis, and no CISA KEV confirmation was provided.
Improper access control on the Synergis Softwire installation folder exposes sensitive files to any low-privileged local user on Windows Server deployments and Genetec Streamvault SV-100E and SV-300E all-in-one appliances. The CVSS scope change (S:C) is particularly consequential in this context: Synergis Softwire is a physical access control server, meaning credentials or configuration material extracted from the installation directory could allow an attacker to manipulate physical security decisions or pivot into backend systems. No public exploit has been identified at time of analysis, and Genetec has released remediated versions in the 12.0.2 and 12.2.0 branches.
Local privilege escalation in Windows Cryptographic Services affects Windows 10, Windows 11, and Windows Server versions from 2012 through 2025 due to insecure storage of cryptographic material. Authenticated attackers with low privileges can exploit this CWE-922 weakness (insecure storage of sensitive information) to gain high-level access to confidentiality, integrity, and availability. Microsoft has released patches for all affected versions. No public exploit identified at time of analysis,
Insecure Storage of Sensitive Information vulnerability in Drupal AI (Artificial Intelligence) allows Retrieve Embedded Sensitive Data. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.4.11, from 1.5.0 to 1.5.2.
Insecure Storage of Sensitive Information vulnerability in Drupal Content Sync (content-sync.io) allows Retrieve Embedded Sensitive Data. This issue affects Content Sync (content-sync.io) versions: from 0.0.0 to 3.2.2.
Drupal sites running the SAML SSO - Service Provider contrib module at versions up to and including 3.2.0 store sensitive information insecurely, allowing a highly privileged authenticated user to retrieve embedded sensitive data. The flaw is network-reachable but requires high privileges (PR:H) on the Drupal site, and the vendor has released a patched version; no confirmed active exploitation or working exploit code was observed, and EPSS is 0.15% (4th percentile). Exploitation preconditions narrow the realistic exposure to trusted administrative accounts or already-compromised privileged sessions on sites where the module is installed and enabled.
Limited confidentiality exposure in Oracle JavaFX 25.0.4 and 27 stems from a high-complexity flaw in the JavaFX component that a network-positioned, unauthenticated attacker can only trigger after a victim loads and runs attacker-supplied sandboxed Java Web Start or applet code; a successful attack yields read access to a subset of JavaFX-accessible data, with no integrity or availability impact. The assessed CVSS 3.1 base score of 3.1 reflects the combined drag of high attack complexity (AC:H), mandatory user interaction (UI:R), and single-scope low confidentiality impact. This is a client-side-only issue that does not affect server deployments running solely administrator-installed trusted code, and no public exploit identified at time of analysis.
Information disclosure in Dell OS Recovery Tool versions prior to 2.4.4 allows a low-privileged local account, combined with physical access to the machine and user interaction with the tool, to read sensitive information that the application stores insecurely on disk. The exposure is limited by design: the attack vector is physical (AV:P), authentication is required at the low-privilege level (PR:L), and the only impact is Low confidentiality (C:L) with no integrity or availability effect, producing a CVSS base score of just 2.2. There is no public exploit code identified at time of analysis and the issue is not confirmed as actively exploited (CISA KEV); remediation is available by upgrading to Dell OS Recovery Tool 2.4.4 or later per Dell DSA-2026-450.
Yamaha wireless LAN router NWR100 stores sensitive information insecurely in configuration files produced by its CONFIG file export function, and those exported files can be read by an unauthenticated attacker, exposing their contents. Affected units are NWR100 devices running firmware Rev.26.00.07 and earlier (tracked as CPE cpe:2.3:a:yamaha_corporation:nwr100, advisory JVNVU91027179), and the impact is confidentiality-only - no integrity or availability effect is described. The CVSS 4.0 base score is 7.1 and the vendor-side assessment corresponds to CVSS 3.1 7.1 (AV:N/AC:L/PR:N/UI:R/C:H/I:N/A:N); no public exploit code and no confirmed active exploitation are identified in the available data, and the JVN/Yamaha advisories should be treated as the primary source for update guidance.
Insecure storage of sensitive information in Progress MOVEit Transfer allows an authenticated low-privilege local user to recover confidential material - most plausibly stored credentials, keys, or configuration secrets - from the MOVEit Transfer host, as reflected by the assessed CVSS 3.1 vector AV:L/AC:L/PR:L/UI:R/C:H, which requires local presence, a valid account, and user interaction. Affected builds are MOVEit Transfer before 2025.1.6 and 2026.0.0 through 2026.0.3, with remediation in 2025.1.6 and 2026.0.4 per the Progress September 2026 security bulletin. There is no public exploit identified at time of analysis and the issue is not confirmed actively exploited (CISA KEV); note that the authoritative independent assessment rates the impact as confidentiality-only (C:H/I:N/A:N), not the integrity and availability impact implied by the 7.3 base score in the raw feed.
Information disclosure in Brocade SANnav before 2.4.0b and 3.0.0 occurs because the product writes encoded passwords and authentication tokens to log files, including the SANnav supportsave diagnostic bundle. An attacker who gains access to those logs or the supportsave output can recover secrets and potentially reuse them, though the description frames this as requiring an authenticated attacker with file-level access and the assessed vector reflects a local/authenticated prerequisite; the input CVSS 4.0 vector lists PR:N, a discrepancy that should be confirmed with the vendor. No public exploit identified at time of analysis, and no CISA KEV confirmation was provided.
Improper access control on the Synergis Softwire installation folder exposes sensitive files to any low-privileged local user on Windows Server deployments and Genetec Streamvault SV-100E and SV-300E all-in-one appliances. The CVSS scope change (S:C) is particularly consequential in this context: Synergis Softwire is a physical access control server, meaning credentials or configuration material extracted from the installation directory could allow an attacker to manipulate physical security decisions or pivot into backend systems. No public exploit has been identified at time of analysis, and Genetec has released remediated versions in the 12.0.2 and 12.2.0 branches.
Local privilege escalation in Windows Cryptographic Services affects Windows 10, Windows 11, and Windows Server versions from 2012 through 2025 due to insecure storage of cryptographic material. Authenticated attackers with low privileges can exploit this CWE-922 weakness (insecure storage of sensitive information) to gain high-level access to confidentiality, integrity, and availability. Microsoft has released patches for all affected versions. No public exploit identified at time of analysis,
Insecure Storage of Sensitive Information vulnerability in Drupal AI (Artificial Intelligence) allows Retrieve Embedded Sensitive Data. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.4.11, from 1.5.0 to 1.5.2.
Insecure Storage of Sensitive Information vulnerability in Drupal Content Sync (content-sync.io) allows Retrieve Embedded Sensitive Data. This issue affects Content Sync (content-sync.io) versions: from 0.0.0 to 3.2.2.
Drupal sites running the SAML SSO - Service Provider contrib module at versions up to and including 3.2.0 store sensitive information insecurely, allowing a highly privileged authenticated user to retrieve embedded sensitive data. The flaw is network-reachable but requires high privileges (PR:H) on the Drupal site, and the vendor has released a patched version; no confirmed active exploitation or working exploit code was observed, and EPSS is 0.15% (4th percentile). Exploitation preconditions narrow the realistic exposure to trusted administrative accounts or already-compromised privileged sessions on sites where the module is installed and enabled.
Limited confidentiality exposure in Oracle JavaFX 25.0.4 and 27 stems from a high-complexity flaw in the JavaFX component that a network-positioned, unauthenticated attacker can only trigger after a victim loads and runs attacker-supplied sandboxed Java Web Start or applet code; a successful attack yields read access to a subset of JavaFX-accessible data, with no integrity or availability impact. The assessed CVSS 3.1 base score of 3.1 reflects the combined drag of high attack complexity (AC:H), mandatory user interaction (UI:R), and single-scope low confidentiality impact. This is a client-side-only issue that does not affect server deployments running solely administrator-installed trusted code, and no public exploit identified at time of analysis.
Information disclosure in Dell OS Recovery Tool versions prior to 2.4.4 allows a low-privileged local account, combined with physical access to the machine and user interaction with the tool, to read sensitive information that the application stores insecurely on disk. The exposure is limited by design: the attack vector is physical (AV:P), authentication is required at the low-privilege level (PR:L), and the only impact is Low confidentiality (C:L) with no integrity or availability effect, producing a CVSS base score of just 2.2. There is no public exploit code identified at time of analysis and the issue is not confirmed as actively exploited (CISA KEV); remediation is available by upgrading to Dell OS Recovery Tool 2.4.4 or later per Dell DSA-2026-450.