This CVE has been withdrawn by MITRE
MITRE marked CVE-2026-71245 as REJECTED on . There is no longer a valid blast radius to assess. Any historical package or vendor data shown below is preserved for audit reference only.
Reason given by MITRE
Red Hat CNA-LR concluded that this CVE is not valid.
CVE-2026-71245 Blast Radius
✕ WITHDRAWN — HISTORICAL DATAMautic's getLeadIdsByFieldValueAction (LeadBundle/Controller/AjaxController.php) reads a field parameter from the request, sanitizes it only with Inpu…