Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In the Linux kernel, the following vulnerability has been resolved: smb: client: Don't log plaintext credentials in cifs_set_cifscreds When debug logging is enabled, cifs_set_cifscreds() logs the key payload and exposes the plaintext username and password. Remove the debug log to avoid exposing credentials.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 1 product
| Date | Total | Labels |
|---|
| 2026-03-25 | 2 | Patch2 |
| 2026-03-28 | 1 | General1 |
| 2026-06-17 | 1 | Patch1 |
#SUSE Linux Micro 6.0 e 6.1 receberam correção para 98 falhas no kernel. A CVE-2026-23303 expõe credenciais SMB em texto puro quando debug logging está ativo. Saiba mais: -> http://tinyurl.com/y6h9bfcf https://t.co/KIgyHVOdki
Post summary
SUSE Linux Micro 6.0 and 6.1 have applied a kernel patch addressing 98 vulnerabilities, including CVE‑2026‑23303, which reveals SMB credentials in plaintext when debug logging is active.
CVE-2026-23303 In the Linux kernel, the following vulnerability has been resolved: smb: client: Don't log plaintext credentials in cifs_set_cifscreds When debug logging is enabled… https://www.cve.org/CVERecord?id=CVE-2026-23303
Post summary
The Linux kernel CVE-2026-23303, which involved SMB client logging plaintext credentials, has been fixed, but no PoC, exploit, or detailed patch information is included.
⚡ New CVE Alert: CVE-2026-23303 🚨 Risk Level: Unknown 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-23303 #CVE-2026-23303 #CVE #CyberSecurity #InfoSec https://t.co/SuakK1IUak
Post summary
The tweet announces CVE-2026‑23303, indicating an unknown risk level and unspecified affected products, while only linking to the NVD entry without providing further technical or remedial details.
🚨*CVE* CVE-2026-23303 In the Linux kernel, the following vulnerability has been resolved: smb: client: Don't log plaintext credentials in cifs_set_cifscreds When debug logging is enabled… https://www.cve.org/CVERecord?id=CVE-2026-23303 ----- Traducción: CVE-2026-23303 En … http://infoflow.cloud`
Post summary
The post states that CVE‑2026‑23303, which caused plaintext SMB credentials to be logged by the Linux kernel, has been resolved, but provides no PoC, exploit, or active exploitation details.
9 of 9 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | linux | linux_kernel | - | - | - |
| OS | linux | linux_kernel | 3.3 | - | - |
| OS | linux | linux_kernel | 3.3 | - | - |
| OS | linux | linux_kernel | 3.3 | - | - |
| OS | linux | linux_kernel | 3.3 | - | - |
| OS | linux | linux_kernel | 3.3 | - | - |
| OS | linux | linux_kernel | 3.3 | - | - |
| OS | linux | linux_kernel | 3.3 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |