Medium severity6.5NVD Advisory· Published Oct 27, 2026· Updated Oct 27, 2026
CVE-2026-116814
CVE-2026-116814
Description
OpenPanel before 3.0.0 contains an information exposure vulnerability that writes database connection URLs and email template data to standard output logs. Users with log access can obtain database credentials from migration startup logs and password-reset tokens logged when SMTP_HOST and RESEND_API_KEY are unset.
Affected products
1- Range: <3.0.0
Patches
Vulnerability mechanics
References
4- github.com/Openpanel-dev/openpanel/commit/337b4ff8fe268c769a075a2e53206d54045cb2d5nvd
- github.com/Openpanel-dev/openpanel/commit/b197f024388060e37ef3b3dad43451a3d0a5d501nvd
- github.com/Openpanel-dev/openpanel/security/advisories/GHSA-xr2x-w49w-hp2cnvd
- www.vulncheck.com/advisories/openpanel-before-3.0.0-sensitive-information-exposure-via-application-logsnvd
News mentions
0No linked articles in our index yet.