Description
A low privileged remote attacker is able to view a list of roles that should only be accessible to administrators. This results in a low level of confidentiality breach, as no particularly sensitive information is affected.
Published: 2026-10-13
Score: 5.3 Medium
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 13 Oct 2026 12:00:00 +0000

Type Values Removed Values Added
Description A low privileged remote attacker is able to view a list of roles that should only be accessible to administrators. This results in a low level of confidentiality breach, as no particularly sensitive information is affected.
Title Exposure of Role List to Low-Privileged Remote Users in Bender Custom&Partner Service
First Time appeared Bender
Bender customer Platform Software
Weaknesses CWE-862
CPEs cpe:2.3:a:bender:customer_platform_software:*:*:*:*:*:*:*:*
Vendors & Products Bender
Bender customer Platform Software
References
Metrics cvssV3_1

{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N'}

cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N'}

Subscriptions

Bender Customer Platform Software
cve-icon MITRE

Status: PUBLISHED

Assigner: CERTVDE

Published:

Updated: 2026-10-13T12:07:52.309Z

Reserved: 2026-09-21T14:38:34.561Z

Link: CVE-2026-94410

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-13T12:17:15.130

Modified: 2026-10-13T12:17:15.130

Link: CVE-2026-94410

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses