CVE-2026-78386

Name of the Vulnerable Software and Affected Versions RansomLook (affected versions not specified)

Description Sensitive operator-side scraping configuration is exposed through multiple unauthenticated API responses. Location records associated with ransomware groups and markets are returned to unauthenticated callers if the location is not marked as private. These records may contain internal fields such as header, which can include authentication headers, session cookies, or credentials; init script, which may contain logic to bypass CAPTCHA, anti-bot protections, or paywalls; and browser, which discloses scraping environment details. An unauthenticated remote attacker can query the affected API endpoints to obtain these values, potentially replaying authentication material against monitored services or identifying and defeating collection mechanisms.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.