Cloudreve before 4.16.1 Authentication Bypass via Cached Context Hint

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-101056 · Microsoft / collected KEV context

EUVD-2026-87981

GHSA-qh53-mf6v-496j

GHSA-vx2m-jpxr-xv7w

GO-2026-6287

cve-program · CVE-2026-101056

• https://github.com/cloudreve/cloudreve/security/advisories/GHSA-vx2m-jpxr-xv7w
• https://www.vulncheck.com/advisories/cloudreve-before-4.16.1-authentication-bypass-via-cached-context-hint

euvd · EUVD-2026-87981

• https://github.com/cloudreve/cloudreve/security/advisories/GHSA-vx2m-jpxr-xv7w
• https://www.vulncheck.com/advisories/cloudreve-before-4.16.1-authentication-bypass-via-cached-context-hint

nvd · CVE-2026-101056

• https://github.com/cloudreve/cloudreve/security/advisories/GHSA-vx2m-jpxr-xv7w
• https://www.vulncheck.com/advisories/cloudreve-before-4.16.1-authentication-bypass-via-cached-context-hint

osv · GHSA-vx2m-jpxr-xv7w

• https://github.com/cloudreve/cloudreve/security/advisories/GHSA-vx2m-jpxr-xv7w
• https://github.com/cloudreve/cloudreve

osv · GO-2026-6287

• https://github.com/cloudreve/cloudreve/security/advisories/GHSA-vx2m-jpxr-xv7w

No related operational record is retained in the current change model.