CVE-2026-2328

—

CVSS 3.1

7.5 high

EPSS

<1%p23

Published

Mar 30, 2026 (Mar 30, 2026)

Modified

Jun 17, 2026

Description

An unauthenticated remote attacker can exploit insufficient input validation to access backend components beyond their intended scope via path traversal, resulting in exposure of sensitive information.

Weakness: CWE-790
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.