Directus Api vulnerabilities

1 known vulnerability affecting directus/directus_api.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2026-26185MEDIUMCVSS 5.3fixed in 32.2.02026-02-12

CVE-2026-26185 [MEDIUM] CWE-203 CVE-2026-26185: Directus is a real-time API and App dashboard for managing SQL database content. Before 11.14.1, a t Directus is a real-time API and App dashboard for managing SQL database content. Before 11.14.1, a timing-based user enumeration vulnerability exists in the password reset functionality. When an invalid reset_url parameter is provided, the response time differs by approximately 500ms between existing and non-existing users, enabling reliable user en