PT-2026-140048

CVE-2026-12735

·

Published

2026-11-08

·

Updated

2026-11-08

Description by

CVSS 3.1
4.3
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
IBM Controller Disclosure Management 1.0.0.0 could allow an attacker to obtain sensitive EXIF metadata from uploaded images due to improper removal of sensitive information before storage.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
CWE-212: Improper Removal of Sensitive Information Before Storage or Transfer
Related identifiers
CVE-2026-12735
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com