CVE-2026-44263

Weblate: Private Translation Enumeration via Screenshot API

Weblate is a web based localization tool. Prior to version 5.17.1, the screenshots, tasks, and component link API allowed for the enumeration of translations in a project inaccessible to the user. This issue has been patched in version 5.17.1.

We have discovered 73 live websites that are affected by CVE-2026-44263.

Run a Free Instant Scan



Affected Software

Product  Weblate
Category Custom Application
Vulnerable Domains73 live websites (100% of Weblate install base)
Vulnerable Versions
  • from 0 through 5.17.1
Vulnerable Versions Count16 versions ( 84% of all versions)


Common Weakness Enumeration

CWE-203 Observable Discrepancy



Details

  • Published - May 7, 2026
  • Updated - May 7, 2026

Website Distribution by Country

Number of websites using CVE-2026-44263
United States18 websites


Germany23 websites
France13 websites
Italy2 websites
Russia2 websites
Australia1 websites
Bulgaria1 websites
Canada1 websites
Switzerland1 websites

Website Distribution by TLD

Number of websites using CVE-2026-44263
.com21 websites
.org16 websites
.net8 websites
.de4 websites
.io3 websites
.ca1 websites
.ch1 websites
.co1 websites
.eu1 websites
.fi1 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2026-44263

Top websites that are affected by CVE-2026-44263. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
****.*****.com Czech Republic***,***
*******.****.app United States*,***,***
*********.*******.org Singapore*,***,***
*********.*******.io United States*,***,***
*******.*****.im United States*,***,***
*********.********.org United States*,***,***
*********.*********.org France*,***,***
***********.**************.org Germany*,***,***
*********.***.***.ca Canada*,***,***
*********.********.org United States*,***,***
See full domain list

FAQ

CVE-2026-44263 is Observable Discrepancy in Weblate
A total of 73 websites have been identified as vulnerable to CVE-2026-44263, based on global website indexing conducted by WebTechSurvey.
The Weblate is affected by the CVE-2026-44263 vulnerability.
Weblate versions up to 5.17.1 are vulnerable to CVE-2026-44263.
CVE-2026-44263 is resolved in version 5.17.1 of Weblate.