{
  "cveId": "CVE-2026-1836",
  "url": "https://patchblox.com/security/cve/CVE-2026-1836",
  "summary": "CVE-2026-1836 is fixed in redmine on 1 platform by DEBIAN-CVE-2026-1836 (version 6.1.3\u002Bds-1), released June 12, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "redmine: The system stores the username and password from the login form after submitting the request",
  "description": "The system stores the username and password from the login form after submitting the request. This could allow an attacker with access to the platform to return to the browser and view the login credentials.",
  "published": "2026-06-12T14:16:30Z",
  "severity": "",
  "epss": 0.00105,
  "epssPercentile": 0.01058,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "redmine",
      "release": "Debian 14",
      "fixedVersion": "6.1.3\u002Bds-1",
      "fix": "DEBIAN-CVE-2026-1836",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-1836",
      "released": "2026-06-12T14:16:30Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}