CWE-200

High likelihood

Exposure of Sensitive Information to an Unauthorized Actor

Parent: CWE-668 - Exposure of Resource to Wrong Sphere

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

9,625 vulnerabilities with CWE-200
CVE-2026-30852
Caddy 2.7.5-2.11.2 - Info Disclosure
CVE-2026-29787 MEDIUM
mcp-memory-service <10.21.0 - Info Disclosure
CVSS 5.3
CVE-2026-29779 HIGH
UptimeFlare <377a596 - Info Disclosure
CVSS 7.5
CVE-2026-30829 MEDIUM
Checkmate <3.4.0 - Info Disclosure
CVSS 5.3
CVE-2026-27796 MEDIUM
Homarr <1.54.0 - Info Disclosure
CVSS 5.3
CVE-2026-30244 HIGH
Plane <1.2.2 - Info Disclosure
CVSS 7.5
CVE-2026-30233 MEDIUM
OliveTin <3000.11.1 - Auth Bypass
CVSS 6.5
CVE-2026-30847
Wekan 8.31.0-8.33 - Info Disclosure
CVE-2026-30846
Wekan 8.31.0-8.33 - Info Disclosure
CVE-2026-30845
Wekan 8.31.0-8.33 - Info Disclosure
CVE-2026-28682 MEDIUM
Gokapi <2.2.3 - Info Disclosure
CVSS 6.4
CVE-2026-28675 MEDIUM
OpenSift <1.6.3-alpha - Info Disclosure
CVSS 5.3
CVE-2026-2589 MEDIUM
Greenshift Plugin <12.8.3 - Info Disclosure
CVSS 5.3
CVE-2026-28492
File Browser <2.61.0 - Path Traversal
CVE-2025-68467 LOW
Dark Reader - Info Disclosure
CVSS 3.4
CVE-2026-28434 MEDIUM
cpp-httplib <0.35.0 - Info Disclosure
CVSS 5.3
CVE-2026-3058 MEDIUM
Seraphinite Accelerator <2.28.14 - Info Disclosure
CVSS 4.3
CVE-2026-2747 HIGH
SEPPmail Secure Email Gateway <15.0.1 - Info Disclosure
CVSS 7.5
CVE-2026-2025 HIGH
Mail Mint WordPress Plugin <1.19.5 - Info Disclosure
CVSS 7.5
CVE-2026-1980 MEDIUM
WPBookit Plugin for WordPress <=1.0.8 - Info Disclosure
CVSS 5.3
CVE-2026-25146 CRITICAL
OpenEMR 5.0.2-7.9.9 - Info Disclosure
CVSS 9.6
CVE-2026-0025 HIGH
Notification.java - Privilege Escalation
CVSS 8.4
CVE-2026-0005 MEDIUM
KeyguardServiceDelegate - Auth Bypass
CVSS 6.2
CVE-2025-48642 MEDIUM
payload.rs - Info Disclosure
CVSS 5.5
CVE-2025-48635 HIGH
TaskFragmentOrganizerController - Privilege Escalation
CVSS 7.7
Details
Vulnerabilities 9,625
Exploit Likelihood High