CVE-2026-56355

LOW

INFO Priority: 0.01 BB Relevance: 57/100

Published: 2026-06-20 Modified: 2026-10-25 First seen: 2026-10-29 Status: active

Network No Auth No Interaction

AV: Network

AC: High

PR: None

UI: None

S: Unchanged

C: Low

I: None

A: None

GNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization.

CWE-696

https://news.ycombinator.com/item?id=48605220

https://www.hacktron.ai

57 / 100

✓ Network accessible
✓ No authentication
✓ No user interaction

3.7 / 10.0 v3.1

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

0.40%

Raw Score 0.004040

Percentile 34.6%

Date 2026-10-29

2026-10-29

0.00404

2026-10-28

0.00404

nvd ref →