CVE-2026-44415
Affected systems do not properly restrict access to internal APIs and paths for authenticated users.
Published Oct 13, 2026 · updated Oct 14, 2026
Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system or result in the deletion of data.
Timeline
Detection, updates, and resolution for this record.
Oct 13, 2026 · NIST NVD
Detected
Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system or result in the deletion of data.
Oct 14, 2026 · NIST NVD
Updated
Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system or result in the deletion of data.
Sources
- CVE.orgCVE-2026-44415
Official CVE identifier
cve.org - FIRST EPSSCVE-2026-44415
30-day exploitation probability 0.5%
first.org - NIST NVDCVE-2026-44415
Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the sys
nvd.nist.gov