CVE-2026-34393

Summary

Weblate is a web based localization tool. In versions prior to 5.17, the user patching API endpoint didn't properly limit the scope of edits. This issue has been fixed in version 5.17.

Affected Software

Weaknesses

• CWE-269: CWE-269: Improper Privilege Management

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://github.com/WeblateOrg/weblate/security/advisories/GHSA-3382-gw9x-477v
• https://github.com/WeblateOrg/weblate/pull/18687

• ←Previous
• Next→