CVE-2026-94410 — Exposure of Role List to Low-Privileged Remote Users in Bender Custom&Partner Service
A low privileged remote attacker is able to view a list of roles that should only be accessible to administrators. This results in a low level of confidentiality breach, as no p…
Published: 2026-10-13 · CVSS: 5.3 · CVSS 4.0
A low privileged remote attacker is able to view a list of roles that should only be accessible to administrators. This results in a low level of confidentiality breach, as no particularly sensitive information is affected.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7