CVE-2026-5599None▾ SunlitA user with API access and "manage users" permission in any venueless world is able to trigger deletion of user accounts in other worlds.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 31.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.2%
0.2% → 0.4%
A user with API access and "manage users" permission in any venueless world is able to trigger deletion of user accounts in other worlds.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-115517Medium· 6.4Unrestricted network access between execution contexts in KNIME Business Hub
CVE-2026-115416High· 7.7Incorrect authorization checks in Amazon Athena engine version 3 query processing
CVE-2026-114087High· 8.1Trigger.dev before 4.5.6 Authentication Bypass via Hardcoded Default Secrets
CVE-2026-109441Medium· 5.8LangAlpha through 2026.09.07 Cross-Tenant Sandbox Exposure via Shared Docker Bridge
CVE-2026-109443High· 8.8JoySafeter through 1.0.0 Authenticated RCE via Copilot Standard Mode Shell
CVE-2026-98466High· 8.2kernel: KVM: arm64: Transfer the hyp stack pages out of the host stage-2 (CVE-2026-98466)