Bender CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM Bender CVE published 2026-10-13

CVE-2026-94410

A low-privileged remote attacker can view a list of roles meant for administrators in Bender's Custom&Partner Service, leading to a low-level confidentiality breach. No particularly sensitive information is exposed. The issue has a CVSS score of 5.3 and is classified as MEDIUM severity. This vulnerability allows attackers to gain visibility into role lists, potentially aiding in further attacks. Defenders [truncated]