CVE-2026-50205
SMTP Password Exposure in System Logs
Publication date: 2026-06-04
Last updated on: 2026-06-04
Assigner: 8fc372e3-d9c5-46e4-9410-38469745c639
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-532 | The product writes sensitive information to a log file. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability involves system log files that output unencrypted SMTP server authentication passwords. Alongside these passwords, sensitive employee corporate identification data is also exposed in the logs.
How can this vulnerability impact me? :
The exposure of unencrypted SMTP server authentication passwords and sensitive employee identification data in system logs can lead to unauthorized access to email servers and compromise of employee personal information. This can result in data breaches, loss of confidentiality, and potential misuse of corporate credentials.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
This vulnerability exposes unencrypted SMTP server authentication passwords and sensitive employee corporate identification data in system log files. Such exposure of sensitive information can lead to non-compliance with data protection regulations like GDPR and HIPAA, which require the protection of personal and sensitive data against unauthorized access and disclosure.
Specifically, GDPR mandates appropriate technical measures to ensure data confidentiality and integrity, and HIPAA requires safeguarding electronic protected health information. The leakage of authentication credentials and sensitive employee data in logs could violate these requirements, potentially resulting in regulatory penalties and increased risk of data breaches.