PT-2026-51387

CVE-2026-48166

·

Published

2026-06-22

·

Updated

2026-06-23

Description by

CVSS 3.1
5.3
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Filament versions 4.0.0 through 4.11.4 Filament versions 5.0.0 through 5.6.4
Description The login page contains a timing discrepancy that enables unauthenticated attackers to perform email enumeration. This allows an attacker to determine if a specific email address is registered to an account.
Recommendations Update to version 4.11.5. Update to version 5.6.5.
Exploitability
Exploit
Fix
Researchers
Vendors
Affected products
Weakness enumeration
CWE-208: Observable Timing Discrepancy
Related identifiers
CVE-2026-48166
GHSA-5W46-G9PQ-WH6F
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com