Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An issue that could allow a user with access to a credential to view sensitive fields through an API response has been resolved. This is an instance of CWE-200: Exposure of Sensitive Information to an Unauthorized Actor, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N (2.7 Low). This issue was fixed in version 4.0.260203.0 of the runZero Platform.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🚨*CVE* CVE-2026-5375 An issue that could allow a user with access to a credential to view sensitive fields through an API response has been resolved. This is an instance of CWE-200: Exposur… https://www.cve.org/CVERecord?id=CVE-2026-5375 ----- Traducción: CVE-2026-5375 Se … http://infoflow.cloud`
Post summary
CVE‑2026‑5375, a credential‑based exposure of sensitive API fields (CWE‑200), has been resolved with a patch.
CVE-2026-5375 An issue that could allow a user with access to a credential to view sensitive fields through an API response has been resolved. This is an instance of CWE-200: Exposur… https://www.cve.org/CVERecord?id=CVE-2026-5375
Post summary
The CVE-2026-5375 vulnerability, a CWE-200 information exposure issue that allows credentialed users to view sensitive API fields, has been resolved with an available fix, though no PoC or active exploitation details are provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | runzero | runzero_platform | - | - | - |