CVE-2026-41948 - Vulnerability Details

Threat entity extracted from intelligence sources

Frequency
4
occurrences
First Seen
June 23, 2026
Last Seen
June 23, 2026

CVE-2026-41948 is a vulnerability tracked by ThreatCluster, appearing in 1 threat cluster built from 4 intelligence report mentions.

CVE-2026-41948 is a vulnerability tracked across 1 threat cluster and 4 intelligence report mentions on ThreatCluster. First observed June 23, 2026; most recent activity June 23, 2026.

Related Threat Clusters

  • Critical DifyTap Vulnerabilities Expose AI Data Across 1M+ Apps

    Zafran Labs identified four vulnerabilities in Dify, an open-source AI platform used by over one million applications, including critical flaws allowing cross-tenant data leakage. Two vulnerabilities, CVE-2026-41947 and…

    8 articles · Updated June 23, 2026

Recent Intelligence Reports

  • 4 vulnerabilities in Dify expose cross-tenant data | brief — Scworld · June 23, 2026
  • Dify AI Platform Hit by Four CVEs, Worst One Still Unpatched — Aiweekly.Co · June 23, 2026
  • Zafran also identified prolonged exposure — www.zafran.io · June 23, 2026
  • DifyTap Flaws Expose AI Data Across Tenants on Platform Powering 1M+ Apps — Gbhackers · June 23, 2026

Related Entities

Dropping Elephant Data Breach Project DarkSide Maersk Panasonic Thermo Fisher Volvo China CVE-2024-5846 CVE-2026-41947 CVE-2026-41949 CVE-2026-41950

Frequently asked questions

What is CVE-2026-41948?

CVE-2026-41948 is a vulnerability tracked by ThreatCluster, appearing in 1 threat cluster built from 4 intelligence report mentions.

Is CVE-2026-41948 still active?

The most recent intelligence report mentioning CVE-2026-41948 on ThreatCluster is dated June 23, 2026.

What is CVE-2026-41948 associated with?

Across ThreatCluster reporting, CVE-2026-41948 most frequently co-occurs with Dropping Elephant, Data Breach, Project DarkSide, Maersk, Panasonic, among 12 tracked related entities.

What are the latest developments involving CVE-2026-41948?

The most significant recent cluster is “Critical DifyTap Vulnerabilities Expose AI Data Across 1M+ Apps” (8 articles · Updated June 23, 2026). CVE-2026-41948 appears across 1 threat cluster in total, listed above with sources.

How much reporting does ThreatCluster have on CVE-2026-41948?

CVE-2026-41948 appears in 4 intelligence report mentions across 1 deduplicated threat cluster, aggregated from 17,000+ monitored sources.

CVSS v3.1 Breakdown