VULNERABILITY INTELLIGENCE

CVE-2026-48958

CVSS score6.4 MEDIUM

EPSS probability0.46%

CISA KEVNot currently listed

Published2026-07-07

Last modified2026-10-25

CVSS vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H

Description

An improper access check allows unauthorized users to create custom fields via webservices endpoints.