CVE-2026-61344 describes a missing authentication vulnerability (CWE-306) in the Superior Court of California, County of Los Angeles Hearing Reminder Service. The service's API endpoint at https://www.hrs.courts.ca.gov returns court reminder records without requiring authentication, potentially exposing sensitive information to unauthorized users. The vulnerability has a CVSS 3.1 score of 5.3 (medium severity) with network attack vector, low attack complexity, no privileges required, and no user interaction needed. No remediation or patch information is currently available.

Unauthorized users can access court reminder records containing potentially sensitive information due to the lack of authentication on the API endpoint. This exposure could lead to privacy violations or unauthorized disclosure of court-related data. There is no indication of impact on integrity or availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the API endpoint through network controls or implement authentication mechanisms to prevent unauthorized access.