CVE-2026-61344

MediumCVSS 5.3/10Last modified Oct 25, 2026

Description

The Superior Court of California Hearing Reminder Service at https://www.hrs.courts.ca.gov exposes an API endpoint that returns court reminder records containing potentially sensitive information without authentication.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-306

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
Superior Court of California, County of Los AngelesHearing Reminder Service< 2026-04-28

References

Timeline

Published
Jul 9, 2026
Last modified
Oct 25, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-613456.5Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.CVE-2026-613467.0Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.CVE-2026-613475.5Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.CVE-2026-613487.0Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.CVE-2026-613497.8Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally.CVE-2026-61358.8A weakness has been identified in Tenda F451 1.0.0.7_cn_svn7958. This issue affects the function fromSetIpBind of the file /goform/SetIpBindCVE-2026-613504.6Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.CVE-2026-613528.1Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized CVE-2026-613537.8Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally.CVE-2026-613557.8Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.CVE-2026-613567.8Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.CVE-2026-613577.8Use after free in Application Information Services allows an authorized attacker to elevate privileges locally.
CVE-2026-61344: Medium severity, CVSS 5.3 | Vulnix