What is CVE-2026-72549?

CVE-2026-72549 is a medium-severity vulnerability in Opensignlabs Opensign, classified under Information Disclosure. CVSS score: 5.3/10. Published 2026-08-11.

How severe is CVE-2026-72549?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Information disclosure in Opensignlabs Opensign

CVE-2026-72549

An information disclosure vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to map any email address or username to its internal user objectId via the getUserId Parse cloud function. The function…

Vulnerability class: Information Disclosure

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Opensignlabs Opensign — versions 0

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c

Frequently asked questions

What is CVE-2026-72549?: CVE-2026-72549 is a medium-severity vulnerability in Opensignlabs Opensign, classified under Information Disclosure. CVSS score: 5.3/10. Published 2026-08-11.
How severe is CVE-2026-72549?: Medium severity. CVSS v3 base score is 5.3 out of 10.