HIGHCVSS v3.1 8.5Vulnerability
CVE-2026-116819
OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level project members to obtain plaintext integration secrets because the notification.rules query skips redactIntegration. Attackers can call the notification.rules tRPC query to retrieve Slack bot tokens, webhook URLs, and authorization headers for use against external systems.
Properties
- Severity
- HIGH
- Nvd fetched at
- 2026-10-27T03:23:14.679434+00:00
- Cvss severity
- HIGH
- Cvss score
- 8.5
- Retrieved at
- 2026-10-27T03:24:29+00:00
- Score
- 8.5
- Cvss version
- 3.1
- Last source
- NVD
- Cve id
- CVE-2026-116819
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
- First seen by Signal
- 2026-10-27T03:16:31+00:00
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
- Published at
- 2026-10-27T00:17:16.293
- Last modified
- 2026-10-27T00:17:16.537
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph