CVE-2026-0519

Information Disclosure in Secure Access Between 12.70 and 14.20

Medium · published January 17, 2026

CVSS v4.0
4.6
EPSS
0%
Percentile
2.7
In the wild
Unconfirmed
What it is

In Secure Access 12.70 and prior to 14.20, the logging

subsystem may write an unredacted authentication token to logs under

certain configurations. Any party with access to those logs could read

the token and reuse it to access an integrated system.

The record
Technical detail
CVSS v4.0
4.6 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00135 · 2.7th percentile
Published
2026-01-17T01:13Z
EPSS history
Timeline
  • 17 JAN 01:13Z
    Information Disclosure in Secure Access Between 12.70 and 14.20
    cvelistv5