https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-18T07:35:31.779391+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-104618 CVE-2026-104618 — sdbootutil: world-readable debug log 2026-10-18T07:35:31.780436+00:00

Affected: SUSE Linux Enterprise Server 16.1, SUSE Linux Enterprise Server for NVIDIA 16.1, SUSE openSUSE Leap 16.1, openSUSE Tumbleweed

On request the `sdbootutil` script creates a world-readable debug log in /var/log/sdbootutil.log. The log file is created world-readable, however, which means that arbitrary low-privileged users in the system will be able to extract secrets from it.