CWE-215 (CWE-215) — 5 disclosed vulnerabilities

Records the NVD classes under CWE-215, highest CVSS first.

CRITICAL 9.3CVE-2026-1026282026-10-01
The Cadmos LTI application hosted at cadmos.eummena.io had Laravel debug mode enabled (APP_DEBUG=true, APP_ENV=local) in a publicly accessible environment. An unauthenticated attacker could send a GET request and trigger an unhandled exception, causing Laravel…
AI risk analysis on Exploit-DB.ai →
MEDIUM 5.5CVE-2026-205432026-10-05
In Modem, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01645293; Issue ID: MSV-67…
mt2716 firmware · mt2716 · mt2735 firmware · mt2735 · mt2737 firmware · mt2737
AI risk analysis on Exploit-DB.ai →
MEDIUM 5.3CVE-2026-116820public PoC2026-10-27
YesWiki from 4.6.0 before 4.7.0 contains an information disclosure vulnerability that allows unauthenticated attackers to view assembled SQL queries by adding the showreq parameter. Attackers can append showreq to public Bazar listing API requests to obtain ta…
AI risk analysis on Exploit-DB.ai →
MEDIUM 5.3CVE-2026-112190public PoC2026-10-19
A security vulnerability has been detected in Webkul Aureus ERP up to 1.6.0. This issue affects some unknown processing of the file composer.json. Such manipulation leads to insertion of sensitive information into debugging code. The attack may be launched rem…
AI risk analysis on Exploit-DB.ai →
UNSCOREDCVE-2026-220612026-10-09
Trident versions v25.02.1 through v26.06.1 are susceptible to a vulnerability that could allow an authenticated attacker with access to debug logs to view LUKS passphrases or SMB Active Directory credentials.
AI risk analysis on Exploit-DB.ai →