← Back

CVE-2026-52698

nvd nist
Published: Jun 17, 2026Modified: Jun 17, 2026Deferred

JSON object

Loading...
7.4
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Exploitability: 3.1 / Impact: 3.7
Source: audit@patchstack.com (Secondary)

Description

Subscriber Sensitive Data Exposure in PushEngage – Web Push Notifications, eCommerce Automation &amp; Chat Widget <= 4.2.3 versions.

Related CWEs

CWE-201
Insertion of Sensitive Information Into Sent Data
The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor.

References (1)

Source: audit@patchstack.com

Timeline

No history available yet.