Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-3nnm-5hms-ufb2
Vulnerability ID VCID-3nnm-5hms-ufb2
Aliases CVE-2026-33212
GHSA-vj45-x3pj-f4w4
Summary
Status Published
Exploitability 0.5
Weighted Severity 2.8
Risk 1.4
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-284 Improper Access Control
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00011 https://api.first.org/data/v1/epss?cve=CVE-2026-33212
epss 0.00011 https://api.first.org/data/v1/epss?cve=CVE-2026-33212
epss 0.00011 https://api.first.org/data/v1/epss?cve=CVE-2026-33212
cvssv3.1 3.1 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3.1_qr LOW https://github.com/advisories/GHSA-vj45-x3pj-f4w4
cvssv3.1 3.1 https://github.com/WeblateOrg/weblate
generic_textual LOW https://github.com/WeblateOrg/weblate
cvssv3.1 3.1 https://github.com/WeblateOrg/weblate/commit/4e06b12cd05d087db68384e09d5f70fe883f2b70
generic_textual LOW https://github.com/WeblateOrg/weblate/commit/4e06b12cd05d087db68384e09d5f70fe883f2b70
ssvc Track https://github.com/WeblateOrg/weblate/commit/4e06b12cd05d087db68384e09d5f70fe883f2b70
cvssv3.1 3.1 https://github.com/WeblateOrg/weblate/pull/18515
generic_textual LOW https://github.com/WeblateOrg/weblate/pull/18515
cvssv3.1 3.1 https://github.com/WeblateOrg/weblate/security/advisories/GHSA-vj45-x3pj-f4w4
cvssv3.1_qr LOW https://github.com/WeblateOrg/weblate/security/advisories/GHSA-vj45-x3pj-f4w4
generic_textual LOW https://github.com/WeblateOrg/weblate/security/advisories/GHSA-vj45-x3pj-f4w4
ssvc Track https://github.com/WeblateOrg/weblate/security/advisories/GHSA-vj45-x3pj-f4w4
cvssv3.1 3.1 https://nvd.nist.gov/vuln/detail/CVE-2026-33212
generic_textual LOW https://nvd.nist.gov/vuln/detail/CVE-2026-33212
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2026-33212
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
https://github.com/WeblateOrg/weblate
https://github.com/WeblateOrg/weblate/pull/18515
https://nvd.nist.gov/vuln/detail/CVE-2026-33212
4e06b12cd05d087db68384e09d5f70fe883f2b70 https://github.com/WeblateOrg/weblate/commit/4e06b12cd05d087db68384e09d5f70fe883f2b70
GHSA-vj45-x3pj-f4w4 https://github.com/advisories/GHSA-vj45-x3pj-f4w4
GHSA-vj45-x3pj-f4w4 https://github.com/WeblateOrg/weblate/security/advisories/GHSA-vj45-x3pj-f4w4
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N Found at https://github.com/WeblateOrg/weblate
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N Found at https://github.com/WeblateOrg/weblate/commit/4e06b12cd05d087db68384e09d5f70fe883f2b70
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T18:08:54Z/ Found at https://github.com/WeblateOrg/weblate/commit/4e06b12cd05d087db68384e09d5f70fe883f2b70
Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N Found at https://github.com/WeblateOrg/weblate/pull/18515
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N Found at https://github.com/WeblateOrg/weblate/security/advisories/GHSA-vj45-x3pj-f4w4
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T18:08:54Z/ Found at https://github.com/WeblateOrg/weblate/security/advisories/GHSA-vj45-x3pj-f4w4
Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2026-33212
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.0151
EPSS Score 0.00011
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-10T18:14:18.839025+00:00 SUSE Severity Score Importer Import https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml 38.6.0