CVE-2026-30994

7.5 highEPSS 0.3%

High (7.5). EPSS 0.3% chance of exploitation in the next 30 days.

Incorrect access control in the config.php component of Slah v1.5.0 and below allows unauthenticated attackers to access sensitive information, including active session credentials.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 17% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2026-04-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://cve.joaopaulodeoliveira.dev/cve.php/published/CVE-2026-30994
https://cve.joaopaulodeoliveira.dev/cve.php/reserved/slah-informatica-sensitive-data-exposure

Check your stack JSON