CVE-2026-68493
After guessing a 62^15 complex unique identifier, a malicious logged in user was able to retrieve a list of memberships for a circle they are not a member of.
Published: 2026-09-18 · CVSS: 3.1 · CVSS 3.0
After guessing a 62^15 complex unique identifier, a malicious logged in user was able to retrieve a list of memberships for a circle they are not a member of.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7