CVE-2026-84717 is a vulnerability in the Ansible Automation Platform automation-controller where the unauthenticated Bitbucket Data Center webhook receiver skips HMAC signature verification for diagnostics:ping events after template lookup. This causes the endpoint to respond with HTTP 200 if a Job Template or Workflow Job Template has a Bitbucket DC webhook configured, and HTTP 403 otherwise. An unauthenticated attacker can use this behavior to enumerate which templates have Bitbucket DC webhooks configured without knowing the secret webhook key.