CVE Catalog

CVE-2026-66443

HighCVSS 7.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.40%

33th percentile - higher than 33% of all known CVEs

Summary

Unauthenticated Sensitive Data Exposure vulnerability in REST API Log versions up to 1.7.1.

Risk Assessment

An unauthenticated person may gain access to sensitive data, such as logs containing personal or authentication data.

Recommendation

Update the plugin to the latest version that restricts access to logs.

Original NVD description (English source)

Unauthenticated Sensitive Data Exposure in REST API Log <= 1.7.1 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS