Question 1

What is CVE-2026-23931 — CVE-2026-23931?

Accepted Answer

The frontend validatate.api.exists action can be exploited by authenticated users to extract plaintext user macro values leading to potential loss of confidentiality.

Question 2

What is the authoritative source for CVE-2026-23931?

Accepted Answer

CVE-2026-23931 (CVE-2026-23931) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-23931CVE-2026-23931

Description

Scoring