PT-2026-38400 · Weblate · Weblate

Luay89

·

CVE-2026-44263

·

Published

2026-05-07

·

Updated

2026-06-01

CVSS v3.1

4.3

Medium

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Weblate versions prior to 5.17.1
Description The screenshots, tasks, and component link API endpoints allow for the enumeration of translations within a project that the user should not be able to access.
Recommendations Update to version 5.17.1.

Exploit

Fix

Side Channel Attack

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-203

Related Identifiers

CVE-2026-44263
GHSA-GCG5-86JR-F7JG
OPENSUSE-SU-2026:10929-1
PYSEC-2026-2318

Affected Products

Weblate