Typically Pre-Authenticated means knowing some additional contextual information such as the userID or something like that is required for exploitation, but actual authentication is not required. The impact is limited by how easy it is to know that pre-authentication information, which remains unknown.

  < HTTP/2 404 
  < date: Fri, 17 Jul 2026 23:18:29 GMT
  < content-length: 0