Insufficiently protected credentials
Teaser from the source
CVSSv3 Score: 7.5 An insufficiently protected credentials vulnerability[CWE-522] in FortiAuthenticator may allow an unauthenticated attacker to obtain sensitive information via HTTPS requests. Revised on 2026-11-10 00:00:00
This is the RSS-feed teaser. Read the full article at the original source.
Read at Fortinet PSIRTMore on Insufficiently
Other advisories
- HighCVE-2026-126248A insufficiently protected credentials vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an…
- HighCVE-2026-91891Dell Terraform Provider for PowerStore, versions prior to 1.3.1 , contains a vulnerability that may cause sensitive authentication data to be insufficiently…
- MediumCVE-2026-86364Dell Live Optics Collector, versions prior to 27.3.8.317 contains a Use of Insufficiently Random Values vulnerability. A low privileged attacker with local a…
- Not ratedosv:CLEANSTART-2026-QU22546Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP)
- MediumCVE-2026-121669Insufficiently protected credentials in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network.
- MediumCVE-2026-108470Insufficiently protected credentials in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to disclose information over a ne…
- MediumCVE-2026-112806Insufficiently protected credentials in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
- HighCVE-2026-112801Insufficiently protected credentials in Windows eSCL Scanner allows an authorized attacker to elevate privileges locally.
Other news entries
- Credential disclosure in LDAP configuration web page.NewsFortinet PSIRT
- SSA-851884 V1.0: Authentication Bypass Vulnerability in Mendix SAML ModuleNewsSiemens ProductCERT
- SSA-638652 V1.0: Authentication Bypass Vulnerability in Mendix SAML ModuleNewsSiemens ProductCERT
- SSA-240718 V1.2 (Last Update: 2025-10-14): Insecure Storage of HTTPS CA Certificate in SIMATIC S7-1200 CPU V2NewsSiemens ProductCERT
Source: https://fortiguard.fortinet.com/psirt/FG-IR-26-262
ID