CVE-2026-14953

A low-privileged remote attacker can exploit an endpoint to enumerate all configured users and identify accounts with elevated privileges, potentially leading to unauthorized access or further attacks. Organizations with exposed APIs or user management systems should prioritize this vulnerability to mitigate the risk of account enumeration and privilege escalation. Immediate action is recommended to secure the affected endpoints and limit access.