CVE-2026-2328

HIGH

Published:Mar 30, 2026(Today)

Modified:Mar 30, 2026

Vulnerability Description

An unauthenticated remote attacker can exploit insufficient input validation to access backend components beyond their intended scope via path traversal, resulting in exposure of sensitive information.

Attack Characteristics

Network AccessLow ComplexityNo Auth NeededNo User Interaction

🤖

AI analysis not yet available

Plain-English explanation, risk summary, and remediation steps will appear here once AI analysis is complete.

References

https://certvde.com/de/advisories/VDE-2026-010

CVSS Score

v3.1

7.5/ 10.0

HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

At a Glance

Affected Products

References

CVSS v3 Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability

Attack VectorNetwork

Attack ComplexityLow

Privileges RequiredNone

User InteractionNone

Impact

ScopeUnchanged

ConfidentialityHigh

IntegrityNone

AvailabilityNone

CVE-2026-2328

✦ Vulnerability Description

Attack Characteristics

References

CVSS Score

At a Glance

CVSS v3 Vector

Impact Analysis

Vulnerability Description