CVE-2026-48376
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk41th percentile - higher than 41% of all known CVEs
Summary
The vulnerability related to improper encoding or escaping of output could result in a security feature bypass. A low-privileged attacker could leverage this to bypass security measures and gain limited unauthorized write access, causing limited disruption to availability. Exploitation does not require user interaction.
Risk Assessment
The risk of security bypass and unauthorized write access may compromise system integrity and cause limited service disruptions.
Recommendation
Apply vendor-provided patches and audit code for proper output encoding.
Original NVD description (English source)
is affected by an Improper Encoding or Escaping of Output vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized write access, causing a limited disruption to availability. Exploitation of this issue does not require user interaction.