PT-2026-30838
CVE-2026-5375
·
Published
2026-04-07
·
Updated
2026-04-08
Description by
CVSS 3.1
2.7
LowMetricsAV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
runZero Platform versions prior to 4.0.260203.0
Description
A flaw exists that may allow a user with existing credentials to view sensitive information through an API response. This is categorized as CWE-200: Exposure of Sensitive Information to an Unauthorized Actor.
Recommendations
Update to version 4.0.260203.0 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾