CVE-2026-55496 | Cloudreve up to 4.16.x User Search /api/v4/user/search SearchActive information disclosure

July 31, 2026 Yanac

A vulnerability was found in Cloudreve up to 4.16.x. It has been rated as problematic. This issue affects the function SearchActive of the file /api/v4/user/search of the component User Search. Performing a manipulation results in information disclosure.

This vulnerability was named CVE-2026-55496. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More