CVE-2025-12059
Critical · 9.8CVSS
9.8
EPSS
0.4%
Published
Feb 11, 2026
CISA due date
—
The record
Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Logo Software Industry and Trade Inc. Logo j-Platform allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Logo j-Platform: from 3.29.6.4 before 3.34.8.9.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-67361 Joomla Extension - j2commerce.com - Unauthenticated file upload with missing directory… CWE-538
- GHSA-9c83-rr99-vfwj MCPVault: PathFilter restricted directories (.git/.obsidian/node_modules) only denied at… CWE-538
- CVE-2026-50099 During WiFi association, Naxclow device firmware prints the host network’s SSID, PSK, and… CWE-538
- CVE-2026-50565 Fission is an open-source, Kubernetes-native serverless framework that simplifies the… CWE-538
- CVE-2026-46617 Fission is an open-source, Kubernetes-native serverless framework that simplifies the… CWE-538
- CVE-2026-29114 A vulnerability has been found in some Dahua products. CWE-538
- CVE-2019-25717 Dräger Infinity Delta, Delta XL, and Kappa patient monitors contain an information… CWE-538
- CVE-2026-10254 A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. CWE-538