LOWCVSS v3 3.5Vulnerability

CVE-2026-67400

A missing token type check allowed to retrieve more additional information about the WOPI configuration with a user or guest token.

Properties

Severity
LOW
Nvd fetched at
2026-10-27T19:32:16.133732+00:00
Cvss severity
LOW
Cvss score
3.5
Retrieved at
2026-10-27T19:33:27+00:00
Score
3.5
Cvss version
3.0
Last source
NVD
Cve id
CVE-2026-67400
Cvss vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
First seen by Signal
2026-10-27T19:33:27+00:00
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
Published at
2026-10-27T17:17:02.327
Last modified
2026-10-27T17:17:02.327

Related Entities (1)

HAS_WEAKNESS (1)

→[Weakness]Improper Access Control

Explore deeper with Ninja Signal's threat intelligence graph

Search in SpektrOpen Signal Desktop
CVE-2026-67400 (CVSS v3 3.5) — Ninja Signal Threat Intelligence | Ninja Signal