VULNERABILITY INTELLIGENCE

CVE-2026-35467

CVSS score7.5 HIGH
EPSS probability0.24%
CISA KEVNot currently listed
Published2026-04-02
Last modified2026-07-24
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

The stored API keys in temporary browser client is not marked as protected allowing for JavScript console or other errors to allow for extraction of the encryption credentials.

Weakness classification

  • cret@cert.org: CWE-522

Primary references