CVE Watch23 oct 2026

CVE-2026-28811

Debug Messages Revealing Unnecessary Information in Apache JSPWiki up to 2.12.3. Users are recommended to upgrade to version 2.12.4, which f

CVSS

7.5

Alto

EPSS

0.8%

p56

KEV

—

Exploit Today

0-100

Publicado: 30 jul 2026 · Última mod.: 23 oct 2026 · CWE-1295

EPSS · 30d

0.8%EPSS · 30 días0.8%

2026-09-302026-10-27

Descripción técnica

Debug Messages Revealing Unnecessary Information in Apache JSPWiki up to 2.12.3. Users are recommended to upgrade to version 2.12.4, which fixes this issue.

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2025-467755.5 MED

6.4%

——2A debug messages revealing unnecessary information vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiExtender 7.4.0 through 7.4.6, FortiExtender 7.2 all versions, FortiExtender 7.0 all versions may allow an authenticated user to obtain administrator credentials via debug log commands.11d CVE-2025-129106.2 MED

4.2%

——1Inappropriate implementation in Passkeys in Google Chrome prior to 140.0.7339.80 allowed a local attacker to obtain potentially sensitive information via debug logs. (Chromium security severity: Low)22d CVE-2025-350313.3 BAJ

3.5%

——1Medical Informatics Engineering Enterprise Health includes the user's current session token in debug output. An attacker could convince a user to send this output to the attacker, thus allowing the attacker to impersonate that user. This issue is fixed as of 2025-04-08.20d