PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-110889 Gantry CVE debrief

A Generation of Error Message Containing Sensitive Information vulnerability exists in Gantry Gantry 5 Framework versions up to 5.6.4. This issue allows attackers to retrieve embedded sensitive data. Defenders should assess exposure, particularly those managing Gantry 5 Framework installations. The vulnerability has a high severity score of 7.5 and is classified as HIGH. It affects Gantry 5 Framework from n/a through 5.6.4. Defenders managing Gantry 5 Framework installations should verify system configurations to prevent potential sensitive data disclosure and update to version 5.6.4 or later if necessary.

Vendor
Gantry
Product
Gantry 5 Framework
CVSS
HIGH 7.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-17
Original CVE updated
2026-10-17
Advisory published
2026-10-17
Advisory updated
2026-10-17

Who should care

Defenders managing Gantry 5 Framework installations should assess exposure and verify system configurations to prevent potential sensitive data disclosure.

Why it matters

CVE-2026-110889 is a high-severity vulnerability in Gantry 5 Framework that allows attackers to retrieve sensitive data through error messages. Defenders should assess exposure, verify system configurations, and update to version 5.6.4 or later if necessary.

  • Potential sensitive data disclosure through error messages
  • Need to verify Gantry 5 Framework version and configurations
  • Possible impact on system security and data confidentiality

Technical summary

The Gantry 5 Framework versions up to 5.6.4 is vulnerable to a Generation of Error Message Containing Sensitive Information issue. This allows attackers to retrieve embedded sensitive data. The vulnerability is caused by the generation of error messages that may contain sensitive information, which can be exploited by attackers to retrieve embedded sensitive data. Defenders should verify and update Gantry 5 Framework to version 5.6.4 or later if necessary and review system configurations for potential exposure.

Defensive priority

Verify and update Gantry 5 Framework to version 5.6.4 or later if necessary; review system configurations for potential exposure.

Recommended defensive actions

  • Verify Gantry 5 Framework version and update to 5.6.4 or later if necessary
  • Review system configurations for potential exposure
  • Monitor system error messages for sensitive information disclosure

Evidence notes

The CVE record and NVD entry provide limited information on the vulnerability. Further verification is required to determine the full scope of affected systems and potential impacts.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-110889 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-110889

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-110889 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-110889

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.