PT-2026-126667

CVE-2026-67400

Published

2026-10-27

Updated

2026-10-27

CVSS 3.1

3.5

Low

MetricsAV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

A missing token type check allowed to retrieve more additional information about the WOPI configuration with a user or guest token.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾