CVE-2025-50709Medium· 4.3▾ SunlitAn issue in Perplexity AI GPT-4 allows a remote attacker to obtain sensitive information via a GET parameter
▾ Sunlit zone — Low / medium · no exploitation signal
impact 23.7 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 26.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.3%
0.3% → 0.4%
An issue in Perplexity AI GPT-4 allows a remote attacker to obtain sensitive information via a GET parameter
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-113669Medium· 5.3ApostropheCMS: Cross-domain session token in URL confers session takeover
CVE-2026-107370Medium· 5.3When a username for an Active Directory connection is a domain without a local part, the auth0-lock library initiates the authentication transaction with a GET request instead of a POST request
CVE-2026-108808Low· 2.6A vulnerability was determined in Eleveo Call Recording Software up to 10.3.0
CVE-2026-107807High· 8.8Nginx UI is a web user interface for the Nginx web server
CVE-2026-76179Critical· 9.8Ebyte NA111-M Use of GET Request Method With Sensitive Query Strings
CVE-2025-62317Low· 2.6HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters