CVE-2026-46458 in Boomeranginformación

Resumen

por MITRE • 2026-07-15

ICU Scandinavia Boomerang is vulnerable to an information disclosure flaw where sensitive credential files are exposed via static HTTP. This allows an unauthenticated remote attacker to retrieve plaintext service account and SMTP credentials by requesting specific XML files from the webroot. This issue has been fixed in version 2.4.18.029

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

CERT-PL

Reservar

2026-05-14

Divulgación

2026-07-15

Moderación

aceptado

Artículo

VDB-379251

CPE

listo

EPSS

0.00000

KEV

no

Actividades

muy bajo

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-46458
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-46458
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-46458/

◂ AnteriorVisión De ConjuntoPróximo ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!