CVE Intelligence

Redmine Redmine vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Redmine Redmine: 1 record(s), with affected versions and fixes.

CVE-2026-1836 Medium · 5.3 CWE-257 Jun 12, 2026
Stored credentials in Redmine
The system stores the username and password from the login form after submitting the request. This could allow an attacker with access to the platform to return to the browser and view the login credentials.