CVE-2026-12735
MEDIUM
NVD
CVSS Score
4.3
Severity
MEDIUM
Published
Nov 08, 2026
Vendor
unknown
Description
IBM Controller Disclosure Management 1.0.0.0 could allow an attacker to obtain sensitive EXIF metadata from uploaded images due to improper removal of sensitive information before storage.