Information disclosure in Cerebrate
CVE-2026-53912
Cerebrate before version 1.37 exposed credential material from self-registration requests. The self-registration workflow stored the registrant’s hashed password in the inbox message data payload. This payload was returned unredacted throu…
Vulnerability class: Information Disclosure
EPSS: 0.002 (15.5th percentile) — read the EPSS interpretation.
Affected products
- Cerebrate — versions 0