Question 1

What is CVE-2026-120328 — CVE-2026-120328?

Accepted Answer

The click tracking middleware does not validate the authentication code of a recipient if the code is omitted. Unauthenticated attackers can retrieve personal data of newsletter recipients, which is inserted into links of sent mails.

Question 2

What is the authoritative source for CVE-2026-120328?

Accepted Answer

CVE-2026-120328 (CVE-2026-120328) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-120328CVE-2026-120328

Description

Scoring