CVE-2026-44753
SAP HANA Database (user self service tools) allows an unauthenticated user to send specially crafted requests that produce distinguishable r
CVSS
3.7
Low
EPSS
0.3%
p28
KEV
—
Exploit Today
8
0-100
Published: Jul 14, 2026 · Last modified: Jul 14, 2026 · CWE-204
0.2%EPSS · 30 days0.3%
2026-08-182026-09-15
SAP HANA Database (user self service tools) allows an unauthenticated user to send specially crafted requests that produce distinguishable responses, enabling enumeration of valid user accounts and email addresses. Successful exploitation could allow the attacker to enumerate valid user accounts, resulting in low impact on confidentiality, with no impact on integrity and availability of the application.
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-891735.3 MED18.0%
——5Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses.5dCVE-2026-91615.3 MED9.7%
——3Observable response discrepancy vulnerability in DernekPlus Website Template allows Account Footprinting.
This issue affects Website Template: through 10092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.6dCVE-2026-867586.5 MED13.6%
——4Snipe-IT before 8.7.0 fails to properly enforce the viewKeys authorization gate in CSV export and API index endpoints, allowing authenticated users with only licenses.view permission to access product keys. Attackers can download all license keys in bulk via CSV export or validate candidate keys through API response discrepancies without needing the viewKeys permission.7dCVE-2026-192057.5 HIG15.8%
——5Observable response discrepancy vulnerability in GastroMenum GastroMenum Web Panel allows Account Footprinting.
This issue affects GastroMenum Web Panel: before 31.08.2026.8dCVE-2026-190807.5 HIG22.9%
——7Observable response discrepancy vulnerability in Menulux Software Inc. Menulux Portal allows Account Footprinting.
This issue affects Menulux Portal: before 20260903211448.8dCVE-2026-785844.3 MED13.3%
——4Observable Response Discrepancy (CWE-204) in the Kibana Osquery feature can lead to information disclosure via Query System for Information (CAPEC-54). An authenticated user holding Osquery live-query privileges could determine whether a scheduled query identifier exists in a Kibana space they are not authorized to access.13d