Findings

CVE-2026-44263

Weblate is a web based localization tool.

Published May 7, 2026 · updated Jun 17, 2026 · weblate weblate

Weblate is a web based localization tool. Prior to version 5.17.1, the screenshots, tasks, and component link API allowed for the enumeration of translations in a project inaccessible to the user. This issue has been patched in version 5.17.1.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. May 7, 2026 · NIST NVD

    Detected

    Weblate is a web based localization tool. Prior to version 5.17.1, the screenshots, tasks, and component link API allowed for the enumeration of translations in a project inaccessible to the user. This issue has been patched in version 5.17.1.

  2. Jun 17, 2026 · NIST NVD

    Updated

    Weblate is a web based localization tool. Prior to version 5.17.1, the screenshots, tasks, and component link API allowed for the enumeration of translations in a project inaccessible to the user. This issue has been patched in version 5.17.1.

Affected

  • cpe weblate/weblateversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-44263

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-44263

    Weblate is a web based localization tool. Prior to version 5.17.1, the screenshots, tasks, and component link API allowed for the enumeration of translations in a project inaccessible to the user. This issue has been patched in version 5.17.1.

    nvd.nist.gov

References