CVE-2026-41949
Named by 2 kept items in this workspace.
Search every workspace for CVE-2026-41949. It matches the name as written, so it can find other things that share it.
The items that name it 2
Authorization bypass vulnerability in the file preview endpoint ("/console/api/files/{file_id}/preview") that allows any authenticated user to read up to 3,000 characters of any uploaded document across all tenants and workspaces using only the file's UUID, CVSS score 7.5/5.9
All cves in this workspace.