CVE-2026-56355

Low

GNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization.

mitre·CWE-696·Published 2026-06-20

CVSS

3.7

EPSS

0.00

KEV

Exploits

cve.orgen

93 chars

GNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization.

NVDen

93 chars

GNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization.

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	3.7	—	—	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
3.1	Secondary	NVD	3.7	2.2	1.4	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N