Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.2

Apache HTTP Server Logs Sensitive Data

CVE-2026-22098 · published 3 months ago
Summary

Apache HTTP Server logs sensitive information like passwords and credit card numbers. This could allow unauthorized access to this data if an attacker gains access to the logs. To mitigate this risk, ensure logs are properly secured and access to sensitive data is limited.

What to do
  • Update evbee dc-80 to version 1.5.1 or later.
Affected software
VendorProductAffected versions
evbee dc-80 < 1.5.1
Original advisory text
Sensitive information is written to logs
Various sensitive information such as passwords and charging card UIDs are written to log files.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
9.2 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-532Insertion of Sensitive Information into Log File
Timeline
Published13 Jul 2026
Updated3 Nov 2026
First seen13 Jul 2026
Sources
CVE-2026-22098 · NVD
CVE-2026-22098 · MITRE
Track software like this
Free during beta