CVE-2026-71458

URLModificationMiddleware resolves named-URL lookups against unfiltered Model.objects before RBAC. The 403→404 shim only rewrites 403 responses, leaving the pk=0 miss path with a different 404 detail string. Differential "Not found." vs "No matches..." reveals whether a named resource org,...

EUVD-2026-85523

URLModificationMiddleware resolves named-URL lookups against unfiltered Model.objects before RBAC. The 403→404 shim only rewrites 403 responses, leaving the pk=0 miss path with a different 404 detail string. Differential "Not found." vs "No matches..." reveals whether a named resource org,...

CVE-2026-71458

The Red Hat Ansible Automation Platform (versions 2.5 and 2.6) is vulnerable to a Named-URL 404 body oracle (CVE-2026-71458). The root cause is that URLModificationMiddleware resolves named-URL lookups against unfiltered Model.objects before RBAC is applied. While a shim rewrites 403 responses to...

CVE-2026-71458: Observable Response Discrepancy

URLModificationMiddleware resolves named-URL lookups against unfiltered Model.objects before RBAC. The 403→404 shim only rewrites 403 responses, leaving the pk=0 miss path with a different 404 detail string. Differential "Not found." vs "No matches..." reveals whether a named resource org,...