Is CVE-2026-71468 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-71468?

CVE-2026-71468 has a CVSS v3 severity of MEDIUM (5.3).

Back

CVE-2026-71468

Description

A flaw was found in acm-search-v2-api-rhel9. When the `getFederationConfig` function refreshes its cache, it improperly reuses a user's bearer token for all subsequent federated requests until the cache expires. This allows other authenticated users to gain unauthorized access to remote managed hub search results, leading to information disclosure.