Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 05 Nov 2026 19:21:50 +0000 CVE-2026-116683 — CTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive v… https://db.gcve.eu/vuln/cve-2026-116683 <p><strong>Affected:</strong> ctfer-io terraform-provider-ctfd</p> <p>CTFer.io&#39;s CTFd Terraform Provider manages CTFd resources as code. From 0.1.5 until 2.8.2, ctfd_team.password is stored as a non-sensitive value in Terraform state. A local or remote user with access to that state can read the team password without an additional decryption step. This issue is fixed in 2.8.2.</p> <p><strong>Affected:</strong> ctfer-io terraform-provider-ctfd</p> <p>CTFer.io&#39;s CTFd Terraform Provider manages CTFd resources as code. From 0.1.5 until 2.8.2, ctfd_team.password is stored as a non-sensitive value in Terraform state. A local or remote user with access to that state can read the team password without an additional decryption step. This issue is fixed in 2.8.2.</p> https://db.gcve.eu/vuln/cve-2026-116683