CVE-2026-105071

Summary

A sensitive data exposure vulnerability in SiteVault allows unauthenticated attackers to access backup, restore, migration, and cloning functionality without requiring authentication. This flaw enables unauthorized users to potentially extract confidential data from affected systems.

Exploitability

The vulnerability is highly exploitable as it requires no authentication or user interaction, with attackers able to directly access sensitive endpoints using basic HTTP requests.

Blast radius

The impact could be significant across multiple affected installations, potentially exposing backup files, configuration data, and system credentials that were previously protected by authentication mechanisms.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to SiteVault version 1.5.18 or later to remediate this sensitive data exposure vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.