Skip to content
OpenAdvisories

Vendor

VSee

2 known vulnerabilities.

Products

Clinic 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.0
    CVE-2026-13380

    VSee Clinic and API Exposes Cleartext SFTP Credentials in Unauthenticated HTTP Responses

    VSee Clinic 7.1.26 and VSee Clinic API 1.3.0 exposes cleartext SFTP credentials in the HTTP responses of three unauthenticated endpoints. The credentials are present in these responses only when SFTP connections have been configured within the application. No…

    VSee Clinic