Sensitive Information Exposure in Drupal Mailer Plus Log

CVE-2026-16648

What is CVE-2026-16648?

A vulnerability exists in the Drupal Mailer Plus Log plugin that allows the insertion of sensitive information into log files. If remote services manage to obtain stolen credentials, they may gain unauthorized access to critical data logged by the Mailer Plus Log. This issue underscores the importance of secure credential management and the necessity for diligent monitoring of logs to prevent sensitive data exposure.

References