Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Tuleap Enterprise Edition: Unauthorized Data Access via User Input

CVE-2026-14165 · published 3 months ago
Summary

An attacker can potentially access sensitive data of other users by manipulating user-controlled inputs in Tuleap Enterprise Edition versions 17.0 through 17.5. This could compromise user privacy and security. Update to a fixed version or apply a patch to mitigate this risk.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
dassault systèmes tuleap enterprise edition <= 17.0-31
Original advisory text
An Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to access data of other users without authorizat...
An Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to access data of other users without authorization.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
7.5 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-639Authorization Bypass Through User-Controlled Key
Timeline
Published13 Jul 2026
Updated4 Nov 2026
First seen13 Jul 2026
Sources
CVE-2026-14165 · NVD
CVE-2026-14165 · MITRE
Track software like this
Free during beta