https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T04:31:56.528135+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-336935 EUVD-2026-336935 2026-10-06T04:31:56.575406+00:00 EUVD-2026-336935 https://cve.radiocsirt.org/vuln/fkie_cve-2026-56783 fkie_cve-2026-56783 2026-10-06T04:31:56.575447+00:00

Parseable before 2.9.2 contains an information disclosure vulnerability in the notification-target API endpoints that returns webhook tokens and basic-auth credentials in cleartext due to commented-out secret-masking functionality. Any authenticated user with the GetAlert action, including low-privilege reader roles, can recover credentials and internal endpoint URLs for all configured notification targets by querying GET /api/v1/targets or related endpoints.

 https://cve.radiocsirt.org/vuln/ghsa-9cf6-6j4g-mw9r GHSA-9cf6-6j4g-mw9r 2026-10-06T04:31:56.575496+00:00

Parseable before 2.9.2 contains an information disclosure vulnerability in the notification-target API endpoints that returns webhook tokens and basic-auth credentials in cleartext due to commented-out secret-masking functionality. Any authenticated user with the GetAlert action, including low-privilege reader roles, can recover credentials and internal endpoint URLs for all configured notification targets by querying GET /api/v1/targets or related endpoints.