CVE-2026-44415

Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system or result in the deletion of data.
Configurations

No configuration.

History

13 Oct 2026, 10:17

Type Values Removed Values Added
New CVE

Information

Published : 2026-10-13 10:17

Updated : 2026-10-15 20:38


NVD link : CVE-2026-44415

Mitre link : CVE-2026-44415

CVE.ORG link : CVE-2026-44415


JSON object : View

Products Affected

No product.

CWE
CWE-35

Path Traversal: '.../...//'