CVE-2025-26526 — Feedback response viewing and deletions did not respect Separate Groups mode
Separate Groups mode restrictions were not factored into permission checks before allowing viewing or deletion of responses in Feedback activities.
Published: 2025-02-24 · CVSS: 6.5 · CVSS 3.1
Separate Groups mode restrictions were not factored into permission checks before allowing viewing or deletion of responses in Feedback activities.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7