Vulnerability Description
An information exposure vulnerability in the job scheduling component of SANnav allows sensitive credentials to be written to application logs in plain text. When scheduled support save jobs or related operational tasks are executed, sensitive parameters including external server passwords and archive protection keys are logged without proper masking. A local or authenticated user with access to application logs or support bundles can view these cleartext credentials, potentially leading to unauthorized access to remote backup targets or protected archives.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2026-14442?
CVE-2026-14442 is a documented vulnerability. An information exposure vulnerability in the job scheduling component of SANnav allows sensitive credentials to be written to application logs in plain text. When scheduled support save jobs or relate...
How severe is CVE-2026-14442?
CVSS scoring is not yet available for CVE-2026-14442. Check NVD for updates.
Is there a patch for CVE-2026-14442?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.