Skip to content
Threat Feed
Subscribe

Tag

Lamp-Cloud

1 brief RSS
high advisory

Unauthenticated Information Disclosure in lamp-cloud via CVE-2026-91996

An authentication bypass vulnerability in lamp-cloud versions 5.10.0 and earlier allows unauthenticated attackers to exfiltrate sensitive JVM system properties via insecurely whitelisted API endpoints.

lamp-cloud vulnerability authentication-bypass information-disclosure web-application-vulnerability api-security cve authorization-bypass webserver
2r 2t 1c updated