Sensitive Data Exposure in ExtremeCloud IQ – Site Engine

CVE-2026-0689

What is CVE-2026-0689?

In ExtremeCloud IQ – Site Engine prior to version 26.2.10, a vulnerability exists within the NAC administration interface that allows authenticated NAC administrators to access sensitive information obscured on the user interface. Although user credentials appear redacted, the underlying credentials are exposed in the HTTP responses. This flaw enables an authorized administrator to retrieve sensitive data that exceeds their intended access rights, potentially leading to unauthorized access to critical secrets.

References