{"apiVersion":"1.0","identifier":"CVE-2026-81668","description":"A flaw was found in Katello where the Content View Filter Rules API does not properly enforce authorization on the parent Content View Filter. An authenticated, low-privileged user with Content View permissions in one organization may be able to access and modify filter rules belonging to a Content View Filter in another organization by supplying that filter-s identifier. This can result in unauthorized disclosure of filter-rule information and unauthorized changes to unpublished Content View filter configuration.","publishedAt":"2026-08-27T13:18:42","lastModifiedAt":"2026-08-27T17:20:56","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-81668","cvssScore":5.4,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","epssProbability":0.00143,"riskScore":0.55,"affectedProduct":"Katello","affectedVersions":"unknown","vulnerabilityType":"Web app","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-81668","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-81668","en":"https://www.redsauce.net/en/cves/CVE-2026-81668","fr":"https://www.redsauce.net/fr/cves/CVE-2026-81668","pt":"https://www.redsauce.net/pt/cves/CVE-2026-81668","de":"https://www.redsauce.net/de/cves/CVE-2026-81668","sk":"https://www.redsauce.net/sk/cves/CVE-2026-81668","el":"https://www.redsauce.net/el/cves/CVE-2026-81668"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-81668"}}