EUVD-2026-84199Published
Sync-in Server has Username/Login Enumeration via Timing Side-Channel on POST /api/auth/login (incomplete fix of the prior timing-attack advisory)
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-58272 · Microsoft / collected KEV context
cve-program · CVE-2026-58272
euvd · EUVD-2026-84199
nvd · CVE-2026-58272
osv · GHSA-29hq-23m2-2j47
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.