← Database

CVE-2026-12735

MEDIUM CVSS: 4.3 Published: 2026-11-08 Modified: 2026-11-08

Description

IBM Controller Disclosure Management 1.0.0.0 could allow an attacker to obtain sensitive EXIF metadata from uploaded images due to improper removal of sensitive information before storage.

Affected Platforms

Unknown

Weakness Type

CWE-212

References