CVE-2026-65926

No fix known EPSS <1%CVSS 3.1

An anonymous caller when anonymous access is enabled, or a low-privilege authenticated user, may learn private Release Bundle names and versions when the bundle name is known.