CVE-2026-33333

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, there is sensitive information disclosure in the error messages. This issue has been fixed in version 3.2.3.

Scoring

Severity

LOW

CVSS base score

3.5

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

EPSS probability

0.20%

CWE

CWE-209

Published

2026-08-21

Last modified

2026-08-24

Affected products

• Combodo iTop

Weakness type

• CWE-209

Related vulnerabilities

• CVE-2026-66306 — Skype for Business Information Disclosure Vulnerability
• CVE-2026-69294 — Microsoft COM for Windows Information Disclosure Vulnerability
• CVE-2026-68886 — Windows Network Connection Broker Information Disclosure Vulnerability
• CVE-2026-67383 — Microsoft SQL Server Information Disclosure Vulnerability
• CVE-2026-69684 — Windows Error Reporting Information Disclosure Vulnerability
• CVE-2026-69552 — Windows Print Spooler Components Information Disclosure Vulnerability
• CVE-2026-11873 — Pki-core: dogtag-pki: empty request to dogtag /ca/rest/certrequests causes http 500, java exception, and stacktrace disclosure
• CVE-2026-82739 — Ash.Resource.Validation.Confirm leaks a confirmed field's stored value in the atomic mismatch error

Markdown version · Browse all CVEs