Exposure of Password Hashes, API Secret Keys, and Credentials via Forwarder Configuration Export – Guardsix Servicedesk

Advisory ID	GVD-2026-003
CVSSv 3.1 Vector	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N`
CVSSv 3.1 Base Score	8.8
Severity	High
CVE	Pending
CWE	CWE-862 CWE-200
Date Published	2026-10-16
Description	In affected Guardsix SIEM versions, an internal endpoint lacked proper permission enforcement, permitting any authenticated user to download the syslog-forwarder export. This contained privileged information, including password hashes.
Affected Product	Guardsix SIEM v7.11.0 and earlier.
Solution	Upgrade to Guardsix SIEM v7.11.1.0.