CVE-2026-55986

MediumCVSS 5.4

Published: 13/08/2026(UTC)Updated: 14/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.23%

15th percentile - higher than 15% of all known CVEs

The Email Management API bypasses ManageCredentials feature restrictions, allowing unauthorized operations on email addresses.

An attacker can change user email addresses, potentially leading to account takeover or data integrity compromise.

Apply the patch and restrict access to the email management API.

Original NVD description (English source)

Email Management API Bypasses ManageCredentials Feature Restrictions