CVE-2026-35467

HIGH CVSS 7.5 View on NVD ↗

Description

The stored API keys in temporary browser client is not marked as protected allowing for JavScript console or other errors to allow for extraction of the encryption credentials.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

https://github.com/CERTCC/cveClient/
https://github.com/CERTCC/cveClient/pull/39

Published: Apr 02, 2026 21:16 UTC Modified: Apr 03, 2026 16:10 UTC