Topic

Information Disclosure: news, advisories and analysis

7 articlesUpdated 19 Oct 2026

CyberSecureToday covers Information Disclosure across 7 articles published between 16 Sep 2026 and 19 Oct 2026. The coverage includes 7 vulnerability advisories. 7 advisories are rated critical or high severity, and 1 involves a flaw listed in CISA's Known Exploited Vulnerabilities catalog.

Stories on Information Disclosure most often intersect with Fortinet, HackerOne and CWE-284, with Technology, Cloud & SaaS the most affected sector. The most recent story, “Missing Authorization (CWE-862) and Initialization Information Disclosure Flaw Disclosed”, was published 19 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

ThreatsCloud & SaaSCritical
Missing Authorization (CWE-862) and Initialization Information Disclosure Flaw Disclosed
CVE-2026-103091 in Missing Authorization (CWE-862) and Initialization (Information Disclosure) allows remote attackers to trigger arbitrary code execution.
Aisha Noor19 Oct 202610 min read
ThreatsCloud & SaaSCritical
Critical SQL Injection in IBM Cloud Portal Infrastructure Allowed Database Exfiltration
A critical SQL injection flaw on an enterprise IBM Cloud portal enabled unauthenticated remote attackers to extract backend database records.
Daniel Okafor18 Oct 202613 min read
ThreatsCloud & SaaSCritical
WordPress REST API Flaw Exposed Hidden and Private bbPress Forum Content to Unauthenticated Scraping
A broken object authorization flaw in the WordPress core REST API enabled unauthenticated attackers to read private and hidden bbPress forum posts.
Daniel Okafor18 Oct 202613 min read
ThreatsCloud & SaaSHigh
Fortinet FortiOS and FortiProxy Flaw Leaks Administrator Bearer Tokens
Fortinet releases security updates for FortiOS and FortiProxy (CVE-2026-14851) resolving an information disclosure flaw that exposed administrative bearer tokens.
Mei-Lin Chen14 Oct 20268 min read
ThreatsCloud & SaaSHigh
Fortinet FortiSandbox Web Management Access Control Flaw Exposes Forensic Threat Telemetry (CVE-2026-26084)
Fortinet resolves a high-severity improper access control flaw in FortiSandbox (CVE-2026-26084) allowing unauthenticated attackers to expose forensic analysis data.
Daniel Okafor1 Oct 20268 min read
ThreatsCloud & SaaSCritical
vLLM CUDA Kernel Integer Overflow Leaks Cross-Tenant Inference Prompts
An integer overflow flaw in vLLM PagedAttention CUDA kernels allows concurrent inference requests to read sensitive prompt tokens across multi-tenant GPU memory.
Mei-Lin Chen27 Sep 20269 min read
ThreatsCloud & SaaSHigh
Fortinet FortiOS SSL-VPN Sensitive Information Disclosure Flaw CVE-2025-68686 Actively Targeted for Initial Access
CISA updates KEV with CVE-2025-68686, a critical information disclosure vulnerability in Fortinet FortiOS exploited to harvest active VPN session tokens.
CST Editorial Desk16 Sep 20269 min read

Latest coverage

Missing Authorization (CWE-862) and Initialization Information Disclosure Flaw Disclosed

Critical SQL Injection in IBM Cloud Portal Infrastructure Allowed Database Exfiltration

WordPress REST API Flaw Exposed Hidden and Private bbPress Forum Content to Unauthenticated Scraping

Fortinet FortiOS and FortiProxy Flaw Leaks Administrator Bearer Tokens

Fortinet FortiSandbox Web Management Access Control Flaw Exposes Forensic Threat Telemetry (CVE-2026-26084)

vLLM CUDA Kernel Integer Overflow Leaks Cross-Tenant Inference Prompts

Fortinet FortiOS SSL-VPN Sensitive Information Disclosure Flaw CVE-2025-68686 Actively Targeted for Initial Access