CVE Intelligence

SecObserve vulnerabilities

🔔 Create alert RSS

Published CVEs affecting SecObserve products: 1 record(s), with severity, exploitation and fixes.

SecObserve 1

Exploited only (KEV) →

CVE-2026-92759 Medium · 6.5 CWE-522 Sep 16, 2026
SecObserve before 1.59.1 Information Disclosure via API Configuration
SecObserve versions before 1.59.1 contain an information disclosure vulnerability in the ApiConfigurationSerializer that fails to strip the basic_auth_password field from API configuration responses. View-only product members can retrieve the decrypted basic-auth password of configured scanner or integration service accounts through standard REST endpoints.