CVE-2026-58427 | CyberRota

CyberRota Analysis

AI-Generated

The vulnerability exposes the private member list of an organization through the /members API endpoint due to an incomplete fix from a previous pull request. This could lead to unauthorized access to sensitive organizational information, potentially impacting user privacy and security. Organizations utilizing this API should prioritize addressing this issue to safeguard their member data.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links

github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE

CVE-2026-58427

Severity

HIGH

CVSS

7.5

EPSS

0.16%

Original NVD Description

Private org member list leaked via /members API endpoint — incomplete fix for PR #38145