CoreCVE
Back

MEDIUM

Privilege Elevation in Ercom Cryptobox administration console

Published Feb 4, 2026

Description

On a Cryptobox platform where administrator segregation based on entities is used, some vulnerabilities in Ercom Cryptobox administration console allows an authenticated entity administrator with knowledge to elevate his account to global administrator.

Affected products

Remediation

Vendor solution

Upgrade to version 4.40.x.

Weaknesses (2)

CWE-1220

CWE-79

Cross-site Scripting (XSS)

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner THA-PSIRT
Published Feb 4, 2026
Updated Feb 4, 2026
Reserved Jan 13, 2026
Link CVE-2026-0873
CISA Vulnrichment
Updated Feb 4, 2026
NVD
Status Deferred
Modified Jun 17, 2026
Link CVE-2026-0873
Red Hat
Severity n/a
Public date n/a
Links CVE-2026-0873