Home

Description

An Incorrect Privilege Assignment (CWE-266) vulnerability in the Command Centre Server allows an authenticated operator with limited privileges to perform some operations that they would not normally be authorized to perform. Version of Command Centre affected: 9.50 prior to vEL9.50.1587(MR1), 9.40 prior to vEL9.40.3130(MR3), 9.30 prior to vEL9.30.3983(MR5), 9.20 prior to vEL9.20.4349(MR7), all versions of 9.10.

PUBLISHED Reserved 2026-03-01 | Published 2026-07-07 | Updated 2026-07-07 | Assigner Gallagher




MEDIUM: 5.3CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N

Problem types

CWE-266 Incorrect privilege assignment

Product status

Default status
unaffected

9.10 (custom)
affected

9.50 (custom) before vEL9.50.1587(MR1)
affected

9.40 (custom) before vEL9.40.3130(MR3)
affected

9.30 (custom) before vEL9.30.3983(MR5)
affected

9.20 (custom) before vEL9.20.4349(MR7)
affected

References

security.gallagher.com/...Security-Advisories/CVE-2026-26053

cve.org (CVE-2026-26053)

nvd.nist.gov (CVE-2026-26053)

Download JSON