CVE-2026-83803

Sentry is an error tracking and performance monitoring tool. From 23.11.0 until 26.7.0, Sentry instances with the relocation feature enabled unsafely deserialize a legacy database field while importing a user-supplied relocation archive. An authenticated user can craft an archive that causes arbitrary code execution in the import worker process. Self-hosted installations using the default configuration are not affected because the relocation feature is disabled by default. This issue is fixed in version 26.7.0.

• CWE-502

• https://github.com/getsentry/sentry/commit/d7fd44193c282102f9fcd2c73973820f3d10ac3a
• https://github.com/getsentry/sentry/pull/119622
• https://github.com/getsentry/sentry/releases/tag/26.7.0
• https://github.com/getsentry/sentry/security/advisories/GHSA-xm86-7c47-gjm4

Published

Sep 22, 2026

Last Modified

Sep 22, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-8377Missing Authorization vulnerability in Armiya Information Te…8.2
• CVE-2026-83772A vulnerability was detected in Cobham SATCOM VSAT7090 Marit…9.9
• CVE-2026-8378The Frontend File Manager Plugin WordPress plugin through 23…5.4
• CVE-2026-8379The Frontend File Manager Plugin WordPress plugin through 23…7.5
• CVE-2026-8380The Frontend File Manager Plugin WordPress plugin through 23…6.5
• CVE-2026-83801Nautobot is a Network Source of Truth and Network Automation…5.4
• CVE-2026-83805Nautobot is a Network Source of Truth and Network Automation…6.4
• CVE-2026-8381A broken access control vulnerability exists in the TeamView…5.4
• CVE-2026-8382The Advanced Custom Fields (ACF®) plugin for WordPress is vu…5.3
• CVE-2026-8383The LearnPress WordPress plugin before 4.3.7 does not gate …5.3
• CVE-2026-8384In Eclipse Jetty, an HTTP URI of this form: /public;/..…5.3
• CVE-2026-8385The WP Go Maps WordPress plugin before 10.0.10 does not pro…5.3