CVE-2026-22646CWE-209

Certain error messages returned by the application expose internal system details that should not be visible to end users, providing attackers with valuable…

Medium · published January 15, 2026

CVSS v3.1
4.3
EPSS
0%
Percentile
34.3
In the wild
Unconfirmed
What it is

Certain error messages returned by the application expose internal system details that should not be visible to end users, providing attackers with valuable reconnaissance information (like file paths, database errors, or software versions) that can be used to map the application's internal structure and discover other, more critical vulnerabilities.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00412 · 34.3th percentile
Weakness
CWE-209 · Generation of Error Message Containing Sensitive Information
Published
2026-01-15T13:15Z
EPSS history
Timeline
  • 15 JAN 13:15Z
    Certain error messages returned by the application expose internal system details that should not be visible to end users, providing attackers with valuable…
    cvelistv5