CVE Catalog
CVE-2026-28767
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk0.38%
30th percentile - higher than 30% of all known CVEs
Summary
A specific administrative endpoint 'notifications' is accessible without proper authentication.
Risk Assessment
Unauthorized users can access sensitive administrative notifications, potentially leading to information disclosure.
Recommendation
Configure proper authentication for the 'notifications' endpoint or disable it.
Original NVD description (English source)
A specific administrative endpoint notifications is accessible without proper authentication.