Lack of validation allowed privilege calls to select URLs unauthorized disclosures of sensitive information like local usernames – Guardsix Servicedesk

Advisory ID	GVD-2026-004
CVSSv 3.1 Vector	`AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L`
CVSSv 3.1 Base Score	8.6
Severity	High
CVE	Pending
CWE	CWE-287 CWE-306
Date Published	2026-10-16
Description	An authentication bypass allowed unauthenticated requests to skip session and security checks, exposing user and permission information and allowing interference with inter-node functions in distributed deployments.
Affected Product	Guardsix SIEM v7.11.0 and earlier.
Solution	Upgrade to Guardsix SIEM v7.11.1.0.