CVE-2026-118798: Multiple sensitive authentication data exposed

Published Nov 9, 2026

Updated

Multiple sensitive authentication data, including credentials, OAuth-related secrets, session information, and authentication artifacts, are exposed through application logs and persistent client-side storage, enabling unauthorized access and session compromise.

Event History

Nov 9, 2026

CVE Published

via MITRE·12:05 PM

Data Sourced

via MITRE·12:05 PM

DescriptionWeakness

Frequently Asked Questions

What access would an attacker need to exploit the exposure?

The exposed data is available through application logs and persistent client-side storage. An attacker who can access either location could obtain credentials, OAuth-related secrets, session information, or other authentication artifacts.

What could an attacker do with the exposed data?

The exposure can enable unauthorized access and session compromise. The specific impact depends on which credentials, secrets, or session artifacts are exposed.

CVE-2026-118798: Multiple sensitive authentication data exposed

Event History

Frequently Asked Questions

What access would an attacker need to exploit the exposure?

What could an attacker do with the exposed data?

Company

Resources

Contact

Frequently Asked Questions

What access would an attacker need to exploit the exposure?

What could an attacker do with the exposed data?