CVE-2026-115474 | Zulip up to 12.1 Direct Message Drafts privileges management

November 4, 2026 Yanac

A vulnerability marked as critical has been reported in Zulip up to 12.1. This affects an unknown part of the component Direct Message Drafts. Performing a manipulation results in improper privilege management.

This vulnerability is cataloged as CVE-2026-115474. It is possible to initiate the attack remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More