A low-privileged remote attacker can manipulate the schema path parameter in the /index.php/diagnostics_tab/ajax_diag_table_rows endpoint using a valid user cookie allowing disclosure of all user password hashes.
The endpoint on the iDirect iQ200 VSAT terminal returns the complete device configuration as JSON, including the SECURITY section which contains MD5-crypt password hashes for the root SSH and web administration accounts. Any user with valid web credentials can extract these hashes and crack them offline using commodity hardware.
CVE-2026-61911 is a medium severity vulnerability in Cyrus IMAP before version 3.12.4. It allows an authenticated user to leverage a Sieve script to detect the existence of another user's private mailbox or read shared mailbox annotations by observing LMTP delivery behavior. This vulnerability exposes sensitive system information but does not permit modification or denial of service.
CVE-2026-81394 is a vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise that allows an unauthorized local attacker to disclose sensitive system information. The flaw involves exposure of sensitive system information to an unauthorized control sphere. The vulnerability has a medium severity rating with a CVSS score of 5.5. Official fixes have been released in multiple versions of the product.
CVE-2026-81387 is a vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise that allows local unauthorized attackers to disclose sensitive system information. The flaw involves exposure of sensitive system information to an unauthorized control sphere. The vulnerability has a medium severity rating with a CVSS score of 5.5. Official fixes have been released in multiple versions of the product.
CVE-2026-69315 is a vulnerability in the Windows License Manager component of Microsoft Windows 10 Version 1809 and related builds. It allows an authorized local attacker with limited privileges to disclose sensitive system information. The vulnerability does not impact system integrity or availability but can expose confidential data. Microsoft has released official patches that address this issue in multiple Windows 10 versions.
CVE-2026-68842 is a vulnerability in the Windows MIDI Service Module of Windows 11 Version 24H2 that allows an authorized local attacker to disclose sensitive system information. The flaw involves exposure of sensitive system information to an unauthorized control sphere. This vulnerability has a medium severity score of 5.5 and affects specific builds of Windows 11. Microsoft has released official fixes for the affected versions.
CVE-2026-71330 is a high-severity vulnerability in the Windows Services for NFS ONCRPC XDR Driver that allows unauthorized disclosure of sensitive system information over a network. It affects multiple versions of Windows 10 and earlier Windows versions. Microsoft has released official fixes for all affected versions.
CVE-2026-69832 is a vulnerability in the Windows Win32K component that allows an authorized local attacker to disclose sensitive system information to an unauthorized control sphere. The flaw affects multiple versions of Windows 10 and earlier Windows versions. Microsoft has released official fixes for all affected versions. The vulnerability has a medium severity rating with a CVSS score of 5.6.
CVE-2026-69723 is a vulnerability in the Windows Kernel that allows an authorized attacker to disclose sensitive system information over a network. This exposure occurs due to improper control of sensitive information within the kernel, potentially leading to information leakage. The vulnerability affects multiple versions of Windows 10 and earlier Windows versions. Microsoft has released official fixes for all affected versions.
CVE-2026-69406 is a vulnerability in the Windows Kernel that allows an authorized local attacker to disclose sensitive system information. The flaw involves exposure of sensitive system information to an unauthorized control sphere. It affects multiple versions of Windows 10 and earlier Windows versions. A patch is available from Microsoft to address this issue.
CVE-2026-69339 is a vulnerability in the Windows MIDI Service Module of Windows 11 Version 24H2 that allows an authorized local attacker to disclose sensitive system information. The flaw involves exposure of sensitive system information to an unauthorized control sphere. Microsoft has released official fixes for affected versions.
Exposure of Sensitive System Information to an Unauthorized Control Sphere in Armoury Crate driver allows a local user to obtain kernel virtual addresses via a crafted IOCTL request by bypassing the driver's verification, potentially providing further insight into the kernel memory layout.Refer to the '
Security Update for Armoury Crate App ' section on the ASUS Security Advisory for more information.
CVE-2026-76968 is a vulnerability in SAP Web Dispatcher, Internet Communication Manager, and SAP Content Server that allows an authenticated low-privileged attacker to access certain administrative functions or interfaces. This leads to the disclosure of sensitive system information about the system state. The vulnerability impacts confidentiality but does not affect integrity or availability. It has a medium severity with a CVSS score of 6.5. No known exploits are reported in the wild, and no patch information is provided.
CVE-2026-81774 is a high-severity vulnerability in Dotstore WooCommerce Product Attachment (versions up to 2.3.4) that allows unauthorized parties to retrieve embedded sensitive system information. This exposure occurs without requiring privileges or user interaction, potentially compromising confidentiality.
CVE-2026-78268 is a high severity vulnerability affecting Extend Themes' Lead Generation Contact Widget & AI Chatbot (versions up to and including 1.2.0). It allows unauthenticated attackers to expose sensitive system information. The vulnerability is classified under CWE-497, which involves exposure of sensitive system information to unauthorized entities. No official patch or remediation guidance is currently available from the vendor.
The Brushfire platform's video content streaming application (https://online.brushfire.com) exposes database path in requests to users, allowing a remote, unauthenticated attacker to read information about other users. Fixed February 2026.
Dell Command Update (DCU), versions prior to 5.7.1, contain an Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.