CVE-2026-64630CWE-863broken-access-control
CVE-2026-64630
published August 4, 2026
What it is
A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link.
The record
Technical detail
- CVSS
- 5.3 · NONE
- CVSS v4.0
- Not supplied
- EPSS
- 0.00351 · 27.5th percentile
- Weakness
- CWE-863 · Incorrect Authorization
- Published
- 2026-08-04T21:16Z
References (1)
EPSS history
Timeline