CWE-215

CWE-215 · 3 records · 0 with a public proof-of-concept

Records the NVD classes under CWE-215, highest CVSS first.

  1. CRITICAL 9.3CVE-2026-102628

    The Cadmos LTI application hosted at cadmos.eummena.io had Laravel debug mode enabled (APP_DEBUG=true, APP_ENV=local) in a publicly accessible environment. An unauthenticated attacker could send a GET request and trigger an unhandled exception, causing Laravel…

    AI risk analysis on Exploit-DB.ai →

  2. MEDIUM 5.5CVE-2026-20543

    In Modem, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01645293; Issue ID: MSV-67…

    mt2716 firmware · mt2716 · mt2735 firmware · mt2735 · mt2737 firmware · mt2737

    AI risk analysis on Exploit-DB.ai →

  3. UNSCOREDCVE-2026-22061

    Trident versions v25.02.1 through v26.06.1 are susceptible to a vulnerability that could allow an authenticated attacker with access to debug logs to view LUKS passphrases or SMB Active Directory credentials.

    AI risk analysis on Exploit-DB.ai →