THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-61792 (HIGH 7.7) — Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, a project administrator can read files outside their repository through the App store metadata download feature, which resolves attacker-influenced paths wit

[NVD] CVE-2026-61792 (HIGH 7.7) — Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, a project administrator can read files outside their repository through the App store metadata download feature, which resolves attacker-influenced paths wit

mednvdPublished 2026-08-26

CVE-2026-61792 CVSS: 7.7 HIGH Published: 2026-08-26T21:16:39.510

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, a project administrator can read files outside their repository through the App store metadata download feature, which resolves attacker-influenced paths without adequately confining them to the repository. This

Indicators of compromise

CVE-2026-61792cve
CVE-2026-34242cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-61792