Threats Tagged 'ghsa-qmjj-2rwx-5ffc'
View all threats tagged with 'ghsa-qmjj-2rwx-5ffc'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-qmjj-2rwx-5ffc'
Click on any threat for detailed analysis and mitigation recommendations
ESPHome through 2026.7.0-dev discloses plaintext passwords via its web_server component. (CVE-2026-71260)CVE-2026-71260 0 ESPHome versions through 2026.7.0-dev have a vulnerability in the web_server component that discloses plaintext passwords. The web_server listens on port 80 without authentication by default, allowing local network attackers to retrieve sensitive information such as WiFi credentials and API tokens via specific HTTP endpoints. The issue arises because the JSON serialization exposes the raw password in the "value" field despite masking it in the "state" field. Join the discussion | GCVE Database | 08/05/2026, 15:32:19 UTC Added: 08/05/2026, 18:47:03 UTC |
Showing 1 to 1 of 1 result