Findings

CVE-2026-26004

Sentry is a developer-first error tracking and performance monitoring tool.

Published Mar 18, 2026 · updated Jun 17, 2026 · sentry sentry

Sentry is a developer-first error tracking and performance monitoring tool. Versions prior to 26.1.0 have a cross-organization Insecure Direct Object Reference (IDOR) vulnerability in Sentry's GroupEventJsonView endpoint. Version 26.1.0 patches the issue.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 18, 2026 · NIST NVD

    Detected

    Sentry is a developer-first error tracking and performance monitoring tool. Versions prior to 26.1.0 have a cross-organization Insecure Direct Object Reference (IDOR) vulnerability in Sentry's GroupEventJsonView endpoint. Version 26.1.0 patches the issue.

  2. Jun 17, 2026 · NIST NVD

    Updated

    Sentry is a developer-first error tracking and performance monitoring tool. Versions prior to 26.1.0 have a cross-organization Insecure Direct Object Reference (IDOR) vulnerability in Sentry's GroupEventJsonView endpoint. Version 26.1.0 patches the issue.

Affected

  • cpe sentry/sentryversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-26004

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-26004

    Sentry is a developer-first error tracking and performance monitoring tool. Versions prior to 26.1.0 have a cross-organization Insecure Direct Object Reference (IDOR) vulnerability in Sentry's GroupEventJsonView endpoint. Version 26.1.0 patches the issue.

    nvd.nist.gov

References

CVE-2026-26004 · ZeroDay Findings