Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-8znh-acd2-53bm
Vulnerability ID VCID-8znh-acd2-53bm
Aliases CVE-2026-27457
GHSA-wppc-7cq7-cgfv
Summary
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (4)
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CWE-862 Missing Authorization
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00036 https://api.first.org/data/v1/epss?cve=CVE-2026-27457
epss 0.00036 https://api.first.org/data/v1/epss?cve=CVE-2026-27457
epss 0.00036 https://api.first.org/data/v1/epss?cve=CVE-2026-27457
cvssv3.1 4.3 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3.1_qr MODERATE https://github.com/advisories/GHSA-wppc-7cq7-cgfv
cvssv3.1 4.3 https://github.com/WeblateOrg/weblate
generic_textual MODERATE https://github.com/WeblateOrg/weblate
cvssv3.1 4.3 https://github.com/WeblateOrg/weblate/commit/3f58f9a4152bc0cbdd6eff5954f9c7bc4d9f0af9
generic_textual MODERATE https://github.com/WeblateOrg/weblate/commit/3f58f9a4152bc0cbdd6eff5954f9c7bc4d9f0af9
ssvc Track https://github.com/WeblateOrg/weblate/commit/3f58f9a4152bc0cbdd6eff5954f9c7bc4d9f0af9
cvssv3.1 4.3 https://github.com/WeblateOrg/weblate/commit/7802c9b121eb407c48d4adddd4f2458fb3efef0f
generic_textual MODERATE https://github.com/WeblateOrg/weblate/commit/7802c9b121eb407c48d4adddd4f2458fb3efef0f
ssvc Track https://github.com/WeblateOrg/weblate/commit/7802c9b121eb407c48d4adddd4f2458fb3efef0f
cvssv3.1 4.3 https://github.com/WeblateOrg/weblate/pull/18107
generic_textual MODERATE https://github.com/WeblateOrg/weblate/pull/18107
ssvc Track https://github.com/WeblateOrg/weblate/pull/18107
cvssv3.1 4.3 https://github.com/WeblateOrg/weblate/pull/18164
generic_textual MODERATE https://github.com/WeblateOrg/weblate/pull/18164
ssvc Track https://github.com/WeblateOrg/weblate/pull/18164
cvssv3.1 4.3 https://github.com/WeblateOrg/weblate/releases/tag/weblate-5.16.1
generic_textual MODERATE https://github.com/WeblateOrg/weblate/releases/tag/weblate-5.16.1
ssvc Track https://github.com/WeblateOrg/weblate/releases/tag/weblate-5.16.1
cvssv3.1 4.3 https://github.com/WeblateOrg/weblate/security/advisories/GHSA-wppc-7cq7-cgfv
cvssv3.1_qr MODERATE https://github.com/WeblateOrg/weblate/security/advisories/GHSA-wppc-7cq7-cgfv
generic_textual MODERATE https://github.com/WeblateOrg/weblate/security/advisories/GHSA-wppc-7cq7-cgfv
ssvc Track https://github.com/WeblateOrg/weblate/security/advisories/GHSA-wppc-7cq7-cgfv
cvssv3.1 4.3 https://nvd.nist.gov/vuln/detail/CVE-2026-27457
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2026-27457
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2026-27457
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
https://github.com/WeblateOrg/weblate
18107 https://github.com/WeblateOrg/weblate/pull/18107
18164 https://github.com/WeblateOrg/weblate/pull/18164
3f58f9a4152bc0cbdd6eff5954f9c7bc4d9f0af9 https://github.com/WeblateOrg/weblate/commit/3f58f9a4152bc0cbdd6eff5954f9c7bc4d9f0af9
7802c9b121eb407c48d4adddd4f2458fb3efef0f https://github.com/WeblateOrg/weblate/commit/7802c9b121eb407c48d4adddd4f2458fb3efef0f
CVE-2026-27457 https://nvd.nist.gov/vuln/detail/CVE-2026-27457
GHSA-wppc-7cq7-cgfv https://github.com/advisories/GHSA-wppc-7cq7-cgfv
GHSA-wppc-7cq7-cgfv https://github.com/WeblateOrg/weblate/security/advisories/GHSA-wppc-7cq7-cgfv
weblate-5.16.1 https://github.com/WeblateOrg/weblate/releases/tag/weblate-5.16.1
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Found at https://github.com/WeblateOrg/weblate
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Found at https://github.com/WeblateOrg/weblate/commit/3f58f9a4152bc0cbdd6eff5954f9c7bc4d9f0af9
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-03-03T01:39:25Z/ Found at https://github.com/WeblateOrg/weblate/commit/3f58f9a4152bc0cbdd6eff5954f9c7bc4d9f0af9
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Found at https://github.com/WeblateOrg/weblate/commit/7802c9b121eb407c48d4adddd4f2458fb3efef0f
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-03-03T01:39:25Z/ Found at https://github.com/WeblateOrg/weblate/commit/7802c9b121eb407c48d4adddd4f2458fb3efef0f
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Found at https://github.com/WeblateOrg/weblate/pull/18107
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-03-03T01:39:25Z/ Found at https://github.com/WeblateOrg/weblate/pull/18107
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Found at https://github.com/WeblateOrg/weblate/pull/18164
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-03-03T01:39:25Z/ Found at https://github.com/WeblateOrg/weblate/pull/18164
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Found at https://github.com/WeblateOrg/weblate/releases/tag/weblate-5.16.1
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-03-03T01:39:25Z/ Found at https://github.com/WeblateOrg/weblate/releases/tag/weblate-5.16.1
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Found at https://github.com/WeblateOrg/weblate/security/advisories/GHSA-wppc-7cq7-cgfv
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-03-03T01:39:25Z/ Found at https://github.com/WeblateOrg/weblate/security/advisories/GHSA-wppc-7cq7-cgfv
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2026-27457
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.10938
EPSS Score 0.00036
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-10T18:14:04.449330+00:00 SUSE Severity Score Importer Import https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml 38.6.0