CVE-2026-25138
2 advisories.
PyPI/rucio-webui CVE-2026-25138: medium 5.3, EPSS 0.38%
Rucio WebUI has Username Enumeration via Login Error Message
Action: Upgrade rucio-webui to 35.8.3 or later.
pip install rucio-webui==35.8.3pip install rucio-webui==38.5.4pip install rucio-webui==39.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 35.8.3 | - |
| 36.0.0rc1 | 38.5.4 | - |
| 39.0.0rc1 | 39.3.1 | - |
Fixed versions
| 35.8.3 | 38.5.4 | 39.3.1 |
Sources
- osv: GHSA-38wq-6q2w-hcf9
- https://github.com/rucio/rucio/security/advisories/GHSA-38wq-6q2w-hcf9
- https://nvd.nist.gov/vuln/detail/CVE-2026-25138
- https://cheatsheetseries.owasp.org/cheatsheets/Authentication_Cheat_Sheet.html#authentication-and-error-messages
- https://github.com/rucio/rucio
- https://github.com/rucio/rucio/releases/tag/35.8.3
- https://github.com/rucio/rucio/releases/tag/38.5.4
- https://github.com/rucio/rucio/releases/tag/39.3.1
CVE-2026-25138 · published · modified · JSON
PyPI/rucio-webui CVE-2026-25138: medium 5.3, EPSS 0.38%
Rucio WebUI has Username Enumeration via Login Error Message
Action: Upgrade rucio-webui to 35.8.3 or later.
pip install rucio-webui==35.8.3pip install rucio-webui==38.5.4pip install rucio-webui==39.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 35.8.3 | - |
| 36.0.0rc1 | 38.5.4 | - |
| 39.0.0rc1 | 39.3.1 | - |
Fixed versions
| 35.8.3 | 38.5.4 | 39.3.1 |
Sources
- osv: PYSEC-2026-3053
- https://github.com/rucio/rucio/security/advisories/GHSA-38wq-6q2w-hcf9
- https://nvd.nist.gov/vuln/detail/CVE-2026-25138
- https://cheatsheetseries.owasp.org/cheatsheets/Authentication_Cheat_Sheet.html#authentication-and-error-messages
- https://github.com/rucio/rucio
- https://github.com/rucio/rucio/releases/tag/35.8.3
- https://github.com/rucio/rucio/releases/tag/38.5.4
- https://github.com/rucio/rucio/releases/tag/39.3.1
- https://pypi.org/project/rucio-webui
- https://github.com/advisories/GHSA-38wq-6q2w-hcf9
CVE-2026-25138 · published · modified · JSON