CVE-2026-87109

score

0.4

cvss

5.3

epss

0.2%

published

2026-10-09

kev added

—

first seen

2026-10-21

Ops Manager contains an information disclosure caused by authenticated organization members retrieving another member's pending authenticator enrollment seed through user-listing endpoints, letting authenticated members disclose secret authentication material, exploit requires authentication.