Boomerang vulnerabilities

1 known vulnerability in Boomerang from ICU Scandinavia. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Boomerang: Insufficiently Protected Credentials

  CVE-2026-46458Jul 15, 2026ICU Scandinavia

  ICU Scandinavia Boomerang is vulnerable to an information disclosure flaw where sensitive credential files are exposed via static HTTP. This allows an unauthenticated remote attacker to retrieve plaintext service account and SMTP credentials by requesting spec