CVE-2026-103371: Apache Geode: Management REST API: Insertion of Sensitive Information into Log File
Moderate-severity Apache Geode Management REST API flaw logs sensitive information, with no exploitation reported.
CVE-2026-103371 affects Apache Geode's Management REST API, involving insertion of sensitive information into log files. The vulnerability is rated moderate severity and was disclosed by Jinwoo Hwang on the oss-security mailing list. No exploitation details or affected version ranges were included in the brief announcement.
- Apache Geode Management REST API writes sensitive data to log files
- Rated moderate severity by the project
- Disclosed via oss-security mailing list on October 7, 2026
- CVEs
- CVE-2026-103371
- Organizations
- Apache Software FoundationApache Geode
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-103371 | Sensitive Data Logged by Apache Geode Web Management | 7.5 | — |
From the original article
Posted by Jinwoo Hwang on Oct 07 Severity: moderate https://geode. apache. org/ https://www.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.