CVE-2026-18915
Medium · 5.0CVSS
5.0
EPSS
—
Published
Aug 6, 2026
CISA due date
—
The record
Invocation of process using visible sensitive information vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute eta-otp-lock allows System Footprinting. This issue affects eta-otp-lock: before 1.0.4.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-81684 In openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8, the desktop GUI… CWE-214
- CVE-2026-80158 A flaw was found in the ipa_getkeytab module of the community.general Ansible collection. CWE-214
- CVE-2026-65088 NVIDIA NemoClaw contains a vulnerability where an attacker could cause invocation of… CWE-214
- CVE-2026-12139 Tanium addressed an information disclosure vulnerability in Connect. CWE-214
- CVE-2026-9494 An information disclosure vulnerability exists in Canonical ubuntu-pro-client (formerly… CWE-214
- CVE-2026-12250 Invocation of process using visible sensitive information vulnerability in TUBITAK BILGEM… CWE-214
- CVE-2026-41357 OpenClaw before 2026.3.31 contains an environment variable leakage vulnerability in… CWE-214
- CVE-2026-40159 PraisonAI is a multi-agent teams system. CWE-214