CVE-2026-46380 in compliance-trestle

Prediction

by VulDB Data Team • 05/28/2026

A vulnerability was detected in compliance-trestle. This affects an unknown function of the component Remote Fetching Subsystem. Performing a manipulation results in server-side request forgery. The attack can be initiated remotely. Upgrading the affected component is advised.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Moderation: accepted
• Entry: VDB-366892
• CPE: ready
• CWE: CWE-918 (confirmed)
• CVSS: 6.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: very low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-46380
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-46380
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-46380/