CVE Catalog
CVE-2026-65926
LowCVSS 3.1Exploitation Probability (EPSS)
Low risk0.19%
9th percentile - higher than 9% of all known CVEs
Summary
An anonymous caller when anonymous access is enabled, or a low-privilege authenticated user, may learn private Release Bundle names and versions when the bundle name is known.
Risk Assessment
The risk includes disclosure of sensitive package information, which could aid an attacker in further attacks.
Recommendation
It is recommended to restrict anonymous and low-privilege access to package information and implement appropriate access controls.
Original NVD description (English source)
An anonymous caller when anonymous access is enabled, or a low-privilege authenticated user, may learn private Release Bundle names and versions when the bundle name is known.