CVE-2026-15783: Enterprise Server 3.17.0 through 3.17.17; status changes: 3.17.18 — unaffected, 3.18.0 through 3.18.11; status…

Affected technology

Enterprise Server · 3.17.0 through 3.17.17; status changes: 3.17.18 — unaffected, 3.18.0 through 3.18.11; status changes: 3.18.12 — unaffected, 3.19.0 through 3.19.8; status changes: 3.19.9 — unaffected, 3.20.0 through 3.20.4; status changes: 3.20.5 — unaffected, 3.21.0 through 3.21.2; status changes: 3.21.3 — unaffected
GitHub

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

Identifier without verifying that the requesting user could read the rule suite's repository, and because these identifiers are sequential an attacker could enumerate them across the instance. Vendor/CNA’s CVSS 4.0 assessment (base score 5.3/10) rates confidentiality impact as low; integrity and availability impact as none.