CVE-2026-40584

Katalog CVE

CVSS 7.5 · High EPSS 0,44%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada ransomlook. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

RansomLook is a tool to monitor Ransomware groups and markets and extract their victims. Prior to 1.9.0, the API in the affected application improperly filters private location entries in website/web/api/genericapi.py. Because the code removes elements from a list while iterating over it, entries marked as private may be unintentionally retained in API responses, allowing unauthorized disclosure of non-public location information. This vulnerability is fixed in 1.9.0.

Rincian

Terbit di NVD

21 April 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

EPSS (30 hari)

0,44% peluang dieksploitasi; lebih tinggi dari 36,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/RansomLook/RansomLook/security/advisories/GHSA-hv66-vcqc-v87c advisory vendor
• https://vulnerability.circl.lu/vuln/gcve-1-2026-0025 advisory pihak ketiga