CVE-2026-20592
Medium · 4.1CVSS
4.1
EPSS
0.1%
Published
Nov 2, 2026
CISA due date
—
The record
In Modem, there is a possible information disclosure due to side channel information disclosure. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: MOLY01744265; Issue ID: MSV-9505.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-63417 Logging Redactor is a Python library designed to redact sensitive data in logs based on… CWE-532
- CVE-2026-120673 A component of the MongoDB Rust Driver that records diagnostic tracing data can capture… CWE-532
- CVE-2026-121023 Insertion of Sensitive Information into Log File (CWE-532) in the ARP Agent component in… CWE-532
- CVE-2026-18800 When an Event Publisher output adapter is configured with properties that are irrelevant… CWE-532
- CVE-2026-62347 Element Call is a native Matrix video conferencing application. CWE-532
- CVE-2026-119117 Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for… CWE-532
- CVE-2026-119290 Zuke is a code-first, strongly typed build automation system for Deno. CWE-532
- CVE-2026-59388 Cloud Controller (CAPI) leaks sensitive data into audit logs in multiple instances… CWE-532