CVE-2026-26004: Sentry

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Sentry is a developer-first error tracking and performance monitoring tool. Versions prior to 26.1.0 have a cross-organization Insecure Direct Object Reference (IDOR) vulnerability in Sentry's GroupEventJsonView endpoint. Version 26.1.0 patches the issue.

Affected products

• Sentry Sentry: before 26.1.0 (fixed in 26.1.0)

Published 2026-03-18. Last modified 2026-06-17.