CVE-2026-13380
CVE-2026-13380
VSee Clinic 7.1.26 and VSee Clinic API 1.3.0 exposes cleartext SFTP credentials in the HTTP responses of three unauthenticated endpoints. The credentials are present in these responses only when SFTP connections have been configured within…
Weakness classification (CWE)
References
- 57dba5dd-1a03-47f6-8b36-e84e47d335d8 (third-party-advisory)
- 57dba5dd-1a03-47f6-8b36-e84e47d335d8 (product)