CVE-2026-27463CWE-200information-disclosure

CVE-2026-27463

Medium · published August 22, 2026

CVSS v3.1
5.3
EPSS
0%
Percentile
26.6
In the wild
Unconfirmed
What it is

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, the HTML title attribute of the logo in the login page contains the complete iTop version. This issue has been fixed in version 3.2.3.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00343 · 26.6th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2026-08-22T00:16Z
References (2)
https://github.com/Combodo/iTop/commit/d124f8ee58fa243193184ac2c55a561acdded356 · [email protected]https://github.com/Combodo/iTop/security/advisories/GHSA-hm9q-8jx3-f3v5 · [email protected]
EPSS history
Timeline
  • 21 AUG 19:57Z
    Combodo iTop: Version disclosure via login page logo
    cvelistv5