CVE-2026-27661
Medium · 4.3CVSS
4.3
EPSS
0.3%
Published
Mar 10, 2026
CISA due date
—
The record
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected application leaks confidential information in metadata, and files such as information on contributors and email address, on `SSM Server`.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2025-59601 Information Disclosure when resetting device to factory default settings through… CWE-1230
- CVE-2026-45544 Nextcloud is an open source content collaboration platform. CWE-1230
- CVE-2026-49270 Exposure of Sensitive Information Through Metadata vulnerability in Apache ActiveMQ… CWE-1230
- CVE-2025-31959 HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded… CWE-1230
- CVE-2026-29055 Tandoor Recipes is an application for managing recipes, planning meals, and building… CWE-1230
- CVE-2025-13084 The users endpoint in the groov View API returns a list of all users and associated… CWE-1230