CVE-2026-110265 is a vulnerability where a specially crafted malformed search query could cause the system to return search results from outside a user's organization. The issue was identified through log analysis in runZero's hosted environment, which showed only testing activity and no evidence of adversary exploitation. This vulnerability has been fixed in version 5.1.261013.1.