CVE-2026-116814
6.5 MEDIUMpublic exploit availablePublished 2026-10-27 · Updated 2026-10-27
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
OpenPanel before 3.0.0 contains an information exposure vulnerability that writes database connection URLs and email template data to standard output logs. Users with log access can obtain database credentials from migration startup logs and password-reset tokens logged when SMTP_HOST and RESEND_API_KEY are unset.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Weaknesses
CWE-532
Public exploit & PoC references
All references
- https://github.com/Openpanel-dev/openpanel/commit/337b4ff8fe268c769a075a2e53206d54045cb2d5
- https://github.com/Openpanel-dev/openpanel/commit/b197f024388060e37ef3b3dad43451a3d0a5d501
- https://github.com/Openpanel-dev/openpanel/security/advisories/GHSA-xr2x-w49w-hp2c
- https://www.vulncheck.com/advisories/openpanel-before-3.0.0-sensitive-information-exposure-via-application-logs
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- MEDIUMCVE-2023-54407PoC
- HIGHCVE-2025-71423PoC
- HIGHCVE-2025-71425PoC
- MEDIUMCVE-2026-101168
- HIGHCVE-2026-103371
- UNSCOREDCVE-2026-104055PoC
- MEDIUMCVE-2026-104872PoC
- UNSCOREDCVE-2026-105963PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.