Back to search
CVE-2026-21889
Published: Jan 14, 2026
Modified: Jan 14, 2026
PUBLISHED
Description
Weblate is a web based localization tool. Prior to 5.15.2, the screenshot images were served directly by the HTTP server without proper access control. This could allow an unauthenticated user to access screenshots after guessing their filename. This vulnerability is fixed in 5.15.2.
| Vendor | Product | Versions |
|---|---|---|
WeblateOrg | weblate | affected < 5.15.2 |
Weaknesses (CWE)
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now