Apache Storm Logviewer follows worker symlinks across ACLs (CVE-2026-124495)
A topology submitter can read other users' worker logs and other files the Logviewer process can read.
Stories per day · 30 days
8 RSS
Relatedzdi11apache6authorization6apache-answer5ubuntu4zero-day4apache-cocoon3denial-of-service3mlflow3oss-security3ssrf3use-after-free3xorg3xxe3apache-airflow2apache-kafka2apache-storm2directory-traversal2
108 stories, newest first · one card per story
Stories tagged #information-disclosure
Apache Storm supervisor page leaks other topologies (CVE-2026-94125)
An authenticated Nimbus user can see host, port, owner and resources for topologies they cannot read.
Ubuntu warns of Apache HTTP Server DoS and cookie leak
CVE-2026-46729 affects Ubuntu 14.04 LTS through 26.04 LTS; the snippet states no fixed versions.
Ubuntu fixes libsoup cookie-jar leak from USN-8890-1
The follow-up also restates HTTP/2 denial of service and HTTPS proxy disclosure, including CVE-2026-4271.
Airflow secrets masker misses camelCase sensitive keys
Values under privateKey, connectionString, webhookUrl, or accessKey can appear unredacted in logs and API output.
Airflow asset API returns Dag IDs callers cannot read
Authenticated users with asset read access can learn scheduled, producing, or consuming Dag IDs before 3.4.0.
Quest Foglight for Databases FileServlet path disclosure vulnerability
FileServlet external control of file path information disclosure allows sensitive data exposure.
CallBackery before 0.60.1 exposes POD via /doc path traversal
Unauthenticated clients can read the POD of any file through the Perl app’s /doc route; 0.60.1 is the fix.
Unauthenticated MLflow get-artifacts SSRF leaks data (CVE-2026-118628)
ZDI rates the flaw 8.2; the snippet gives no affected versions, fix, or exploitation status.
Kafka lets unauthorized principals read broker files (CVE-2026-112375)
An authenticated principal with no grants can make a broker return a host file or environment variable.
Alpine iLX-F511 Bluetooth stack 0-day can leak data
An attacker must first pair a malicious Bluetooth device; ZDI scores the out-of-bounds read CVSS 3.5.
macOS CoreText out-of-bounds read can disclose information
CVE-2026-112656 is scored CVSS 3.3 and requires opening a malicious page or file.
MailEnable cleartext auth storage leaks data without login
ZDI rates CVE-2026-114551 at CVSS 5.9 and says authentication is not required.
Apache Camel CoAP can leak data in error messages (CVE-2026-101259)
Unmuted consumer exceptions in camel-coap can expose sensitive information to unauthenticated remote users; CVSS is 5.3.
Unauthenticated users can list Plone site users and groups
The October 22 fix covers sites with the Plone REST API enabled; results include user ids and full names.
Tornado flaws may cause denial of service or expose data
USN-8952-1 lists six CVEs that could also let an attacker bypass access controls.
OpenSSL CMP format-string flaw can leak data without login
ZDI rates CVE-2026-63073 at CVSS 6.5; remote attackers need no authentication, and no fixed version is named.
Cisco Expressway flaw lets remote attackers read sensitive data
A crafted HTTP request during Mobile and Remote Access provisioning can bypass authorization checks on Expressway-C and Expressway-E.
Apache Tomcat AJP under-read can mix responses (CVE-2026-103119)
Tomcat 11.0.0-M25 through 11.0.26 can send part of one response body to the next request on the same connection.
Cinder Messages API can disclose cross-project data (CVE-2026-93856)
The notice lists Cinder 9.0.0 before 26.3.1 and the exact releases 27.0.0, 28.0.0, and 29.0.0.
Apache Cocoon XEE flaw can enable SSRF and file disclosure
The retired project’s form processor is affected in every version, and the report names no fixed release.
Plack::Middleware::ETag before 0.06 leaks inodes (CVE-2026-111946)
Default ETag headers in versions from 0.04 before 0.06 reveal file inode numbers.
Ubuntu 26.10 curl update fixes WebSocket read and reuse bugs
USN-8927-2 backports fixes for an out-of-bounds read and a connection-reuse flaw, CVE-2026-107928 and CVE-2026-107929.
ZDI-26-779: (0Day) Sparx Systems Enterprise Architect XSLT Debugger XML External Entity Processing Information Disclosure Vulnerability
Unpatched ZDI zero-day lets remote attackers leak data from Sparx Enterprise Architect via XXE with user interaction.