CVE-2026-103371: Apache Geode: Management REST API: Insertion of Sensitive Information into Log File

Summary by Cyber Security News7 Oct 2026, 20:01 CET

About this summary. This is a short excerpt from the description that oss-security published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://seclists.org/oss-sec/2026/q4/88

Posted by Jinwoo Hwang on Oct 07 Severity: moderate Affected versions: - Apache Geode 2.0.0 before 2.0.3 Description: Insertion of Sensitive Information into Log File in Apache Geode Web Management. This issue affects Apache Geode: from 2.0.0 before 2.0.3. Users are recommended to upgrade to version 2.0.3, which fixes the issue.

Read the full article at oss-security →

Source attribution: headline and facts are from oss-security (seclists.org). Summary method: excerpt of the source description. See our source attribution policy.

Related coverage

Re: "sshole": password authentication bypass: OpenSSH + musl libc

Fwd: Go 1.27.4 and Go 1.26.11 pre-announcement

Re: CPython sandbox escape

zlib 1.4 released with security fixes

Re: "sshole": password authentication bypass: OpenSSH + musl libc

CVE-2026-103866: Apache Sling Engine: Hand-rolled parameter parser diverges from RFC/container parsing, enabling smuggling