CVE-2026-41931

Name of the Vulnerable Software and Affected Versions Vvveb versions prior to 1.0.8.2

Description An information disclosure issue allows unauthenticated attackers to obtain sensitive server information by triggering unhandled exceptions in the password-reset module. By accessing the admin password-reset endpoint, a fatal error is triggered due to a missing namespace import. This exposes the absolute server file path, internal class namespaces, line numbers, and source code excerpts through the debug exception handler.

Recommendations Update to version 1.0.8.2 or later.