CVE-2026-46700 Blast Radius

MEDIUM • CVSS 4.3@actual-app/sync-server's missing authorization on GET /secret/:name allows non-admin OpenID users to enumerate admin-configured bank-sync secrets ##…

Is Your Infrastructure Using These Packages?

EchelonGraph automatically scans your cloud infrastructure and SBOMs to map your exposure to vulnerabilities like CVE-2026-46700.

Start Free Scan →← Back to CVE-2026-46700