VYPR

insights-core

by Red Hat

CVEs (1)

  • CVE-2026-19391MedAug 11, 2026
    risk 0.42cvss 6.5epss

    A flaw was found in insights-core where the password redaction layer fails to recognize credentials not keyed under the literal string 'password'. This allows SSSD LDAP bind passwords (ldap_default_authtok) and Pacemaker fence device credentials to be included in cleartext in…