VULNRABLE / Vulnerability / CVE-2026-55496

CVE-2026-55496

MEDIUM LOW github.com/cloudreve/Cloudreve/v4 GHSA

Exploit verdict: No active-exploit signal

CVSS Score

5.5

Severity

MEDIUM

EPSS

—

Source

GHSA

Summary

Cloudreve: Information Exposure in `GET /api/v4/user/search`: `SearchActive` omits the active-status predicate, leaking inactive/banned account emails

What this means

CVE-2026-55496 is a medium-severity vulnerability affecting github.com/cloudreve/Cloudreve/v4, rated CVSS 5.5. Published July 25, 2026.

View full advisory at GHSA →