Is CVE-2026-105411 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-105411?

CVE-2026-105411 has a CVSS v3 severity of HIGH (8.1).

Back

CVE-2026-105411

Description

An Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker with tracker administration rights on one tracker to update or delete fields of all the trackers on the instance.