CVE-2026-44961
טרם דורגה
תיאור (מקור, אנגלית)
The XML‑RPC API addUser method has a validation bypass introduced in the fix for CVE‑2025‑55129. As a result, API users could create usernames that enabled impersonation or stored XSS attacks. Proper validation has been added where it was missing.
מדדים
- EPSS — סבירות ניצול
- 0% (אחוזון 000) נכון ל-13/8/2026
- CWE
- CWE-287