CVE-2026-24618
Medium · 4.3CVSS
4.3
EPSS
0.2%
Published
Jun 12, 2026
CISA due date
—
The record
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in HashThemes Hash Elements allows Retrieve Embedded Sensitive Data. This issue affects Hash Elements: from n/a through 1.5.4.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-76968 SAP Web Dispatcher, Internet Communication Manager and SAP Content Server allows an… CWE-497
- CVE-2026-80119 PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and… CWE-497
- CVE-2026-80118 PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and… CWE-497
- CVE-2026-66840 XING CPTrans-ME-X contains an Exposure of Sensitive System Information to an Unauthorized… CWE-497
- CVE-2026-67267 Dell Command Update (DCU), versions prior to 5.7.1, contain an Exposure of Sensitive… CWE-497
- CVE-2026-74007 Unauthenticated Sensitive Data Exposure in 3D FlipBook – PDF Flipbook Viewer, Flipbook… CWE-497
- CVE-2026-32468 Unauthenticated Sensitive Data Exposure in Duitku Payment Gateway <= 2.11.14 versions. CWE-497
- CVE-2026-66462 Unauthenticated Sensitive Data Exposure in WooCommerce Appointments <= 5.3.8 versions. CWE-497