CVE Intelligence

SecObserve SecObserve vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting SecObserve SecObserve: 1 record(s), with affected versions and fixes.

CVE-2026-92759 Medium · 6.5 CWE-522 Sep 16, 2026
SecObserve before 1.59.1 Information Disclosure via API Configuration
SecObserve versions before 1.59.1 contain an information disclosure vulnerability in the ApiConfigurationSerializer that fails to strip the basic_auth_password field from API configuration responses. View-only product members can retrieve the decrypted basic-auth password of configured scanner or integration service accounts through standard REST endpoints.