# CVE-2026-5383: An issue that could allow access to Explorer groups from outside of the authorized organization scope has been…

Source: https://junglewise.ai/threats/cve-2026-5383-an-issue-that-could-allow-access-to-explorer-groups-from-outside  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-04-07  
License: CC BY 4.0 with a link back

CVE-2026-5383 · Severity: medium · CVSS 4.4 · Published 2026-04-07

An issue that could allow access to Explorer groups from outside of the authorized organization scope has been resolved. This is an instance of CWE-863: Incorrect Authorization, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L (4.4 Medium). This issue was fixed in version 4.0.260208.0 of the runZero Explorer.

Technologies: [Runzero Platform](https://junglewise.ai/threats/technologies/runzero-platform). Vendors: [Runzero](https://junglewise.ai/threats/vendors/runzero).

## Quick answers

**Is CVE-2026-5383 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-5383 being exploited in the wild.

**How severe is CVE-2026-5383?** Medium severity, with a CVSS score of 4.4, published 7 April 2026.

**Which products and versions are affected?** Runzero Platform. The advisory does not name versions.

**Is there a fix for CVE-2026-5383?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2026-5383?** Check whether you run Runzero Platform. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Runzero Platform

## Related threats

- [runZero Platform information disclosure via malformed search query](https://junglewise.ai/threats/cve-2026-110265-a-specially-crafted-malformed-search-query-could-return-results)
- [An issue that could allow a credential to be updated and used for a task from outside of the authorized organization…](https://junglewise.ai/threats/cve-2026-5384-an-issue-that-could-allow-a-credential-to-be-updated-and-used-for)
- [An issue that could expose records outside of the authorized organization scope through the MCP endpoints has been…](https://junglewise.ai/threats/cve-2026-5382-an-issue-that-could-expose-records-outside-of-the-authorized)
- [An issue that could expose task information outside of the authorized organization scope has been resolved. This is an…](https://junglewise.ai/threats/cve-2026-5381-an-issue-that-could-expose-task-information-outside-of-the)
- [An issue that could allow an authorized user to view the clear-text secrets for a subset of credential types and…](https://junglewise.ai/threats/cve-2026-5380-an-issue-that-could-allow-an-authorized-user-to-view-the-clear)