CVE-2026-44415: High severity vulnerability
Published Oct 13, 2026
·Updated
Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system or result in the deletion of data.
Event History
Oct 13, 2026
CVE Published
via MITRE·09:18 AM
Data Sourced
via MITRE·09:18 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
An attacker must be authenticated and have high privileges. Exploitation can be performed remotely and does not require user interaction.
2
What is the potential impact if the issue is exploited?
An attacker may obtain sensitive internal information and could potentially use it to facilitate unauthorized system access or delete data. The reported impact includes high confidentiality, integrity, and availability consequences.