CVE-2026-26004Disclosure(sentry / sentry)

LOWCVSS 6.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Sentry is a developer-first error tracking and performance monitoring tool. Versions prior to 26.1.0 have a cross-organization Insecure Direct Object Reference (IDOR) vulnerability in Sentry's GroupEventJsonView endpoint. Version 26.1.0 patches the issue.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-639

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • sentry

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • Peaked 1d ago at 2 mentions (2026-03-18); latest day: 1
  • 3 total mentions across 2 days

Affected systems

Vendors
Products
sentry

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-03-18: 2Mentions · 2026-03-19: 1Technical Details · 2026-03-18: 2Technical Details · 2026-03-19: 103-1803-19
Signal classification1 categories
Disclosure
3100.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-03-182
Disclosure2
2026-03-191
Disclosure1
Full discourse3 posts
  • CVEarity@CVEarity
    Disclosure

    ⚡ New CVE Alert: CVE-2026-26004 📊 Severity: 5.7 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-26004 #CVE-2026-26004 #CVE #Medium  #CyberSecurity #InfoSec https://t.co/H3aRzbMeGe

    Post summary

    The tweet announces the existence of CVE-2026-26004, notes its medium severity but provides no evidence of exploitation, exploits, or remediation.

    0000035
    104 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-26004 Insecure Direct Object Reference Vulnerability in Sentry Before 26.1.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-26004

    Post summary

    The statement identifies CVE-2026-26004 as an IDOR flaw in Sentry versions before 26.1.0 but offers no additional details about exploitation, patches, or active use.

    0000040
    4.0K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-26004 Sentry is a developer-first error tracking and performance monitoring tool. Versions prior to 26.1.0 have a cross-organization Insecure Direct Object Reference (IDOR)… https://www.cve.org/CVERecord?id=CVE-2026-26004

    Post summary

    The post reports that Sentry versions prior to 26.1.0 contain a cross‑organization IDOR vulnerability (CVE‑2026‑26004). No PoC, exploit code, or active exploitation is mentioned.

    00000132
    56.7K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appsentrysentry---

Explore more