CVE-2026-45573
Decidim: Push subscriptions can be abused for server-side requests
CVSS score
6.4
EPSS probability
%0.3
Risk score
0.0
Published
2 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
8.5
CVE-2026-45414
Decidim: JWT-backed authentication can be replayed across organizations
D
Patch status unknownEPSS %0
5.5
CVE-2026-45376
Decidim: Admin user search allows SQL injection through similarity-based sorting
D
Patch status unknownEPSS %1
7.5
CVE-2026-45378
Decidim: Verification documents can be downloaded through reusable links
D
Patch status unknownEPSS %0
6.0
CVE-2026-45415
Decidim: CSV census record endpoints improper authorization
D
Patch status unknownEPSS %0
4.9
CVE-2026-45330
Decidim: Verification admins can access supplied IDs from other organisations
D
Patch status unknownEPSS %0
4.8
CVE-2026-44282
Election question titles allow stored script execution
D
Patch verifiedEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-45573"