Medium severityNVD Advisory· Published Mar 26, 2026· Updated May 19, 2026

CVE-2026-4263

Description

Vulnerability of incorrect authorization in HiJiffy Chatbot allows an attacker to download private messages from other users via the parameter 'visitor' in '/api/v1/webchat/message'.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

HiJiffy/Chatbotllm-fuzzy
HiJiffy/HiJiffy Chatbotv5
Range: all versions

Patches

Vulnerability mechanics

References

www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-hijiffy-chatbotnvd

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000