VulnSocial

CVE-2026-73100

LOWCVSS 10.0 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Insertion of Sensitive Information into Log File vulnerability in Apache Juneau. The default REST server call logger records request headers for requests that end in a server error, without redacting them. Any client able to cause a server error gets headers such as Authorization, Cookie, Proxy-Authorization and X-API-Key written in cleartext to the application log, exposing them to anyone who can read the logs. This issue affects Apache Juneau: through 9.2.0. Users are recommended to upgrade to version 9.2.1, which fixes the issue.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-532

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 5 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Peaked 1d ago at 3 mentions (2026-11-05); latest day: 2
  • 5 total mentions across 2 days

Deep dive

Activity timeline5 mentions / 2d
01223Mentions · 2026-11-05: 3Mentions · 2026-11-06: 211-0511-06
Referenced assets4 URLs
Full discourse5 posts
  • cve.now@cvedotnow

    🆕 New CVEs Apache Software Foundation products: 8 critical CVEs Worst: path traversal in DirectoryResource (CVE-2026-121489) Patch → 9.2.1 https://cve.now/CVE-2026-121489?release=CVE-2026-73098,CVE-2026-73099,CVE-2026-73100,CVE-2026-73101,CVE-2026-73116,CVE-2026-73117,CVE-2026-96677&utm_source=x&utm_medium=social&utm_campaign=cvedotnow&utm_content=rollup

    3103674315.2K
    22.0K followersView on X
  • ExploitGrid@exploitgrid

    ExploitGrid Daily Digest 🚨 Top CVEs: CVE-2026-121489 (CVSS: 10) Apache Softw... CVE-2026-122051 (CVSS: 10) edimax CVE-2026-73098 (CVSS: 10) Apache Softw... CVE-2026-73099 (CVSS: 10) Apache Softw... CVE-2026-73100 (CVSS: 10) Apache Softw... ..🧵👇

    26048146.4K
    643 followersView on X
  • Enclave Radar@EnclaveRadar

    🆕 New CVE: CVE-2026-73100 (CVSS 10.0, Enclave score 3/10) Apache Juneau: Sensitive request headers logged in cleartext by the default request logger on server errors Remote, no login needed. Insertion of Sensitive Information into Log File… https://app.enclave.ai/threat-feed/CVE-2026-73100

    00011170
    204 followersView on X
  • ExploitGrid@exploitgrid

    [CVE] CVE-2026-73100 [HIGH PRIORITY] CVSS: 10 | Vendor: #ApacheSoftwareFoundation #Apache Juneau: Sensitive request headers logged in cleartext by the default r... 🔗 https://exploitgrid.net/cve/CVE-2026-73100

    10000259
    643 followersView on X
  • cve.new@cvedotnew

    CVE-2026-73100 · CRITICAL · CVSS 10.0 Apache Juneau through version 9.2.0 logs sensitive request headers in cleartext when a server error occurs, exposing them to log readers. CVSS 4.0 · apache https://cve.new/CVE-2026-73100

    0000047
    440 followersView on X

Explore more

Back to dashboard