Cpe:2.3:a:ctfer.io:terraform-Provider-Ctfd:*:*:*:*:*:*:*:*

The CTFer.io CTFd Terraform Provider fails to mark team passwords as sensitive, resulting in plain-text storage of credentials within Terraform state files (CVE-2026-116683).