CVE-2026-94410

Exposure of Role List to Low-Privileged Remote Users in Bender Custom&Partner Service PUBLISHED

Description (CNA)

A low privileged remote attacker is able to view a list of roles that should only be accessible to administrators. This results in a low level of confidentiality breach, as no particularly sensitive information is affected.

Affected (CNA)

Vendor / product	Versions
Bender / Customer&Partner	affected 5.0.0 before 5.17.5

CWE

CWE-862

References

https://www.certvde.com/en/advisories/VDE-2026-109/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.