Threats tagged 'ghsa-87gv-mpgp-xpp2'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.3	CVE-2026-119757BTCPay Server before 2.4.2, including 2.4.2 release candidates, contains an information disclosure vulnerability that Critical9.32026-11-06GCVE DatabaseCVE-2026-119757 BTCPay Server versions before 2.4.2, including 2.4.2 release candidates, have an information disclosure vulnerability that allows unauthenticated remote attackers to access .macaroon credential files for an LND node. These credentials can be used to gain full control over the Lightning Network Daemon node, enabling attackers to move funds and steal from affected deployments. Report on CVE-2026-119757 Vulnerability CWE-522 #ghsa-87gv-mpgp-xpp2	GCVE Database	2026-11-06

Page 1 of 1