This vulnerability (CVE-2026-65535) concerns an exposure of sensitive system information in TinyMCE Templates maintained by Takayuki Miyauchi. It affects versions up to and including 4.8.1. The issue is categorized as CWE-497, which involves the exposure of sensitive data to unauthorized control spheres. The CVSS v3.1 base score is 4.3, reflecting a medium severity with network attack vector, low attack complexity, requiring low privileges, no user interaction, and limited confidentiality impact. There is no vendor advisory or patch information provided, and the remediation level is unspecified.

The vulnerability allows unauthorized parties to access sensitive system information, potentially aiding further attacks or information gathering. The confidentiality impact is limited, with no integrity or availability impact reported. Exploitation does not require user interaction and can be performed remotely with low privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround is currently documented. Users should monitor vendor communications for updates and consider restricting access to affected versions where feasible.