CVE-2025-14376

Verve Asset Manager - Info Disclosure

Title source: llm

Description

A security issue was discovered within the legacy ADI server component of Verve Asset Manager, caused by plaintext secrets stored in environment variables on the ADI server. This component has been retired and has been optional since the 1.36 release in 2024.

References (1)

Scores

EPSS 0.0002
EPSS Percentile 4.6%

Classification

CWE
CWE-922
Status draft

Timeline

Published Jan 20, 2026
Tracked Since Feb 18, 2026