CVE-2026-44263 | THREATINT

Description

Weblate is a web based localization tool. Prior to version 5.17.1, the screenshots, tasks, and component link API allowed for the enumeration of translations in a project inaccessible to the user. This issue has been patched in version 5.17.1.

PUBLISHED Reserved 2026-05-05 | Published 2026-05-07 | Updated 2026-05-07 | Assigner GitHub_M

MEDIUM: 4.3CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Problem types

CWE-203: Observable Discrepancy

Product status

< 5.17.1

affected

References

github.com/...eblate/security/advisories/GHSA-gcg5-86jr-f7jg

github.com/WeblateOrg/weblate/pull/19258

github.com/...ommit/6cf892c7bd50b667a65a99d716a90694f7d9f203

github.com/WeblateOrg/weblate/releases/tag/weblate-5.17.1

cve.org (CVE-2026-44263)

nvd.nist.gov (CVE-2026-44263)

Download JSON