CVE-2026-50539 | XiboSignage xibo-cms up to 4.4.2 Notification Export {id} id improper authorization

October 28, 2026 Yanac

A vulnerability, which was classified as problematic, was found in XiboSignage xibo-cms up to 4.4.2. Affected by this vulnerability is an unknown functionality of the file /notification/export/{id} of the component Notification Export. The manipulation of the argument ID results in improper authorization.

This vulnerability is known as CVE-2026-50539. It is possible to launch the attack remotely. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More