Is CVE-2026-9152 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-9152 being exploited in the wild.

How severe is CVE-2026-9152?

Informational severity, with a CVSS score of 0, published 21 May 2026.

Which products and versions are affected?

Altium 365 SearchService Cloud deployments prior to May 2026.

Is there a fix for CVE-2026-9152?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-9152 attacked?

It is attacked over the network, in a hosted service.

Am I affected by CVE-2026-9152?

Check whether you run Altium 365 SearchService at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-9152: Altium 365 missing authentication in SearchService SOAP endpoint

CVE-2026-9152 · Severity: info · CVSS 0 · Published 2026-05-21

Altium 365 is a cloud-based platform used by engineers to manage electronics design data and collaboration. A security flaw in its search service allowed unauthorized individuals to access, modify, or delete search index data across different customer accounts. While the primary design files remained secure, an attacker could have viewed sensitive project names, folder structures, and user information, or disrupted the ability of legitimate users to find their work.

Vendors: Altium.

Quick answers

Is CVE-2026-9152 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-9152 being exploited in the wild.
How severe is CVE-2026-9152?: Informational severity, with a CVSS score of 0, published 21 May 2026.
Which products and versions are affected?: Altium 365 SearchService Cloud deployments prior to May 2026.
Is there a fix for CVE-2026-9152?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-9152 attacked?: It is attacked over the network, in a hosted service.
Am I affected by CVE-2026-9152?: Check whether you run Altium 365 SearchService at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A missing authentication vulnerability exists in the Altium 365 SearchService legacy SOAP endpoint. The endpoint fails to require session tokens or identity verification, allowing an unauthenticated network attacker to interact with a workspace's search index if they possess the target workspace identifier. This flaw enables cross-tenant access, allowing attackers to read indexed metadata (project names, folder names, user metadata) and perform unauthorized injection, modification, or deletion of search index entries. While the underlying vault data is not directly affected, the integrity and availability of search results are compromised. This issue affects Altium 365 cloud deployments but does not impact the on-premise Altium Enterprise Server.

Affected products

Altium 365 SearchService Cloud deployments prior to May 2026

Timeline

2026-05-21: disclosed: Vulnerability published in NVD and Altium advisories.

References

https://www.altium.com/platform/security-compliance/security-advisories

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.