Is CVE-2026-47715 actively exploited?

No active exploitation of CVE-2026-47715 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-47715 be exploited remotely?

Yes. CVE-2026-47715 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2026-47715?

CVE-2026-47715 has a CVSS score of 3.1 (LOW).

HOME VULNERABILITIESCVE-2026-47715

LOW

CVE-2026-47715

CWE-639Published: May 26, 2026· Updated: May 26, 2026

3.1

CVSS v3.1

Official Description

Bugsink is a self-hosted error tracking tool. Prior to 2.2.0, Bugsink issue event pages accept a direct event identifier from the URL and, in affected versions, look up that event without also requiring it to belong to the issue in the URL. This is a project-boundary authorization issue: a logged-in user with access to one project can view another project’s event data through an issue they are allowed to access. The affected views include the stacktrace, details, and breadcrumbs pages for an issue event. This vulnerability is fixed in 2.2.0.

NVD Source

Technical Analysis

CVE-2026-47715 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.