CVE-2026-102490 - Undisclosed LPE in Zammad v1.5.0 to v7.1.0-alpha

Back Back to CVE browser

CRITICAL KEV

Undisclosed LPE in Zammad v1.5.0 to v7.1.0-alpha

Published Sep 30, 2026 ·Due Oct 5, 2026

9.4

CRITICAL

CVSS 4.0

EPSS 0.63%

Description

All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root.

Affected products

Vendor Zammad GmbH Product Zammad Default
unaffected
- Version
  1.5.0
  Status
  affected
  Constraints
  <7.1.0-alpha

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Zammad GmbH

Zammad

unaffected

Version	Status	Constraints
1.5.0	affected	<7.1.0-alpha

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-269

Improper Privilege Management

References (4)

https://csirt.divd.nl/CVE-2026-102490
third-party-advisory
https://csirt.divd.nl/DIVD-2026-00015
third-party-advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-90081
Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-102490
government-resourceUS Government Resource

Link	Providers	Tags
https://csirt.divd.nl/CVE-2026-102490		third-party-advisory
https://csirt.divd.nl/DIVD-2026-00015		third-party-advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-90081		Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-102490		government-resourceUS Government Resource

Change history (200)

Oct 6, 2026, 09:07 UTC MITRE
- CVSS severity
  changed from HIGH to CRITICAL
- CVSS vector
  changed from CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C
- CVSS score
  changed from 8.5 to 9.4
- CVSS severity
  changed from CRITICAL to HIGH
- CVSS vector
  changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C to CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D
- CVSS score
  changed from 9.4 to 8.5
Oct 6, 2026, 08:05 UTC MITRE
- CVSS severity
  changed from HIGH to CRITICAL
- CVSS vector
  changed from CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C
- CVSS score
  changed from 8.5 to 9.4
- CVSS severity
  changed from CRITICAL to HIGH
- CVSS vector
  changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C to CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D
- CVSS score
  changed from 9.4 to 8.5
Oct 6, 2026, 08:05 UTC MITRE
- CVSS severity
  changed from HIGH to CRITICAL
- CVSS vector
  changed from CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C
- CVSS score
  changed from 8.5 to 9.4
- CVSS severity
  changed from CRITICAL to HIGH
- CVSS vector
  changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C to CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D
- CVSS score
  changed from 9.4 to 8.5
Oct 6, 2026, 07:19 UTC MITRE
- CVSS severity
  changed from HIGH to CRITICAL
- CVSS vector
  changed from CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C
- CVSS score
  changed from 8.5 to 9.4
- CVSS severity
  changed from CRITICAL to HIGH
- CVSS vector
  changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C to CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D
- CVSS score
  changed from 9.4 to 8.5
Oct 6, 2026, 07:19 UTC MITRE
- CVSS severity
  changed from HIGH to CRITICAL
- CVSS vector
  changed from CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C
- CVSS score
  changed from 8.5 to 9.4
- CVSS severity
  changed from CRITICAL to HIGH
- CVSS vector
  changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C to CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D
- CVSS score
  changed from 9.4 to 8.5
Oct 6, 2026, 07:19 UTC MITRE
- CVSS severity
  changed from HIGH to CRITICAL
- CVSS vector
  changed from CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C
- CVSS score
  changed from 8.5 to 9.4
- CVSS severity
  changed from CRITICAL to HIGH
- CVSS vector
  changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C to CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D
- CVSS score
  changed from 9.4 to 8.5
Oct 6, 2026, 05:48 UTC MITRE
- CVSS severity
  changed from HIGH to CRITICAL
- CVSS vector
  changed from CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C
- CVSS score
  changed from 8.5 to 9.4
- CVSS severity
  changed from CRITICAL to HIGH
- CVSS vector
  changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C to CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D
- CVSS score
  changed from 9.4 to 8.5
Oct 6, 2026, 05:48 UTC MITRE
- CVSS severity
  changed from HIGH to CRITICAL
- CVSS vector
  changed from CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C
- CVSS score
  changed from 8.5 to 9.4
- CVSS severity
  changed from CRITICAL to HIGH
- CVSS vector
  changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C to CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D
- CVSS score
  changed from 9.4 to 8.5
Oct 6, 2026, 05:48 UTC MITRE
- CVSS severity
  changed from HIGH to CRITICAL
- CVSS vector
  changed from CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C
- CVSS score
  changed from 8.5 to 9.4
- CVSS severity
  changed from CRITICAL to HIGH
- CVSS vector
  changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C to CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D
- CVSS score
  changed from 9.4 to 8.5
Oct 6, 2026, 05:48 UTC MITRE
- CVSS severity
  changed from HIGH to CRITICAL
- CVSS vector
  changed from CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C
- CVSS score
  changed from 8.5 to 9.4
- CVSS severity
  changed from CRITICAL to HIGH
- CVSS vector
  changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C to CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D
- CVSS score
  changed from 9.4 to 8.5
Oct 6, 2026, 05:02 UTC MITRE
- CVSS severity
  changed from HIGH to CRITICAL
- CVSS vector
  changed from CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C
- CVSS score
  changed from 8.5 to 9.4
- CVSS severity
  changed from CRITICAL to HIGH
- CVSS vector
  changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C to CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D
- CVSS score
  changed from 9.4 to 8.5
Oct 6, 2026, 05:02 UTC MITRE
- CVSS severity
  changed from HIGH to CRITICAL
- CVSS vector
  changed from CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C
- CVSS score
  changed from 8.5 to 9.4
- CVSS severity
  changed from CRITICAL to HIGH
- CVSS vector
  changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C to CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D
- CVSS score
  changed from 9.4 to 8.5
Oct 6, 2026, 05:02 UTC MITRE
- CVSS severity
  changed from HIGH to CRITICAL
- CVSS vector
  changed from CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C
- CVSS score
  changed from 8.5 to 9.4
- CVSS severity
  changed from CRITICAL to HIGH
- CVSS vector
  changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C to CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D
- CVSS score
  changed from 9.4 to 8.5
Oct 6, 2026, 05:02 UTC MITRE
- CVSS severity
  changed from HIGH to CRITICAL
- CVSS vector
  changed from CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C
- CVSS score
  changed from 8.5 to 9.4
- CVSS severity
  changed from CRITICAL to HIGH
- CVSS vector
  changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C to CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D
- CVSS score
  changed from 9.4 to 8.5
Oct 6, 2026, 05:02 UTC MITRE
- CVSS severity
  changed from HIGH to CRITICAL
- CVSS vector
  changed from CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C
- CVSS score
  changed from 8.5 to 9.4
- CVSS severity
  changed from CRITICAL to HIGH
- CVSS vector
  changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C to CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D
- CVSS score
  changed from 9.4 to 8.5
Oct 6, 2026, 03:02 UTC MITRE
- CVSS severity
  changed from HIGH to CRITICAL
- CVSS vector
  changed from CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C
- CVSS score
  changed from 8.5 to 9.4
- CVSS severity
  changed from CRITICAL to HIGH
- CVSS vector
  changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C to CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D
- CVSS score
  changed from 9.4 to 8.5
Oct 6, 2026, 03:02 UTC MITRE
- CVSS severity
  changed from HIGH to CRITICAL
- CVSS vector
  changed from CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C
- CVSS score
  changed from 8.5 to 9.4
- CVSS severity
  changed from CRITICAL to HIGH
- CVSS vector
  changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C to CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D
- CVSS score
  changed from 9.4 to 8.5
Oct 6, 2026, 03:02 UTC MITRE
- CVSS severity
  changed from HIGH to CRITICAL
- CVSS vector
  changed from CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C
- CVSS score
  changed from 8.5 to 9.4
- CVSS severity
  changed from CRITICAL to HIGH
- CVSS vector
  changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C to CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D
- CVSS score
  changed from 9.4 to 8.5
Oct 6, 2026, 03:02 UTC MITRE
- CVSS severity
  changed from HIGH to CRITICAL
- CVSS vector
  changed from CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C
- CVSS score
  changed from 8.5 to 9.4
- CVSS severity
  changed from CRITICAL to HIGH
- CVSS vector
  changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C to CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D
- CVSS score
  changed from 9.4 to 8.5
Oct 6, 2026, 03:02 UTC MITRE
- CVSS severity
  changed from HIGH to CRITICAL
- CVSS vector
  changed from CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C
- CVSS score
  changed from 8.5 to 9.4
- CVSS severity
  changed from CRITICAL to HIGH
- CVSS vector
  changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C to CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D
- CVSS score
  changed from 9.4 to 8.5
Oct 6, 2026, 03:02 UTC MITRE
- CVSS severity
  changed from HIGH to CRITICAL
- CVSS vector
  changed from CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C
- CVSS score
  changed from 8.5 to 9.4
- CVSS severity
  changed from CRITICAL to HIGH
- CVSS vector
  changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C to CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D
- CVSS score
  changed from 9.4 to 8.5
Oct 6, 2026, 03:02 UTC MITRE
- CVSS severity
  changed from HIGH to CRITICAL
- CVSS vector
  changed from CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C
- CVSS score
  changed from 8.5 to 9.4
- CVSS severity
  changed from CRITICAL to HIGH
- CVSS vector
  changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C to CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D
- CVSS score
  changed from 9.4 to 8.5
Oct 6, 2026, 01:02 UTC MITRE
- CVSS severity
  changed from HIGH to CRITICAL
- CVSS vector
  changed from CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C
- CVSS score
  changed from 8.5 to 9.4
- CVSS severity
  changed from CRITICAL to HIGH
- CVSS vector
  changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C to CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D
- CVSS score
  changed from 9.4 to 8.5
Oct 6, 2026, 01:02 UTC MITRE
- CVSS severity
  changed from HIGH to CRITICAL
- CVSS vector
  changed from CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C
- CVSS score
  changed from 8.5 to 9.4
- CVSS severity
  changed from CRITICAL to HIGH
- CVSS vector
  changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C to CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D
- CVSS score
  changed from 9.4 to 8.5
Oct 6, 2026, 01:02 UTC MITRE
- CVSS severity
  changed from HIGH to CRITICAL
- CVSS vector
  changed from CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C
- CVSS score
  changed from 8.5 to 9.4
- CVSS severity
  changed from CRITICAL to HIGH
- CVSS vector
  changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C to CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D
- CVSS score
  changed from 9.4 to 8.5
Oct 6, 2026, 01:02 UTC MITRE
- CVSS severity
  changed from HIGH to CRITICAL
- CVSS vector
  changed from CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C
- CVSS score
  changed from 8.5 to 9.4
- CVSS severity
  changed from CRITICAL to HIGH
- CVSS vector
  changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C to CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D
- CVSS score
  changed from 9.4 to 8.5
Oct 6, 2026, 01:02 UTC MITRE
- CVSS severity
  changed from HIGH to CRITICAL
- CVSS vector
  changed from CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C
- CVSS score
  changed from 8.5 to 9.4
- CVSS severity
  changed from CRITICAL to HIGH
- CVSS vector
  changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C to CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D
- CVSS score
  changed from 9.4 to 8.5
Oct 6, 2026, 01:02 UTC MITRE
- CVSS severity
  changed from HIGH to CRITICAL
- CVSS vector
  changed from CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C
- CVSS score
  changed from 8.5 to 9.4
- CVSS severity
  changed from CRITICAL to HIGH
- CVSS vector
  changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C to CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D
- CVSS score
  changed from 9.4 to 8.5
Oct 6, 2026, 01:02 UTC MITRE
- CVSS severity
  changed from HIGH to CRITICAL
- CVSS vector
  changed from CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C
- CVSS score
  changed from 8.5 to 9.4
- CVSS severity
  changed from CRITICAL to HIGH
- CVSS vector
  changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C to CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D
- CVSS score
  changed from 9.4 to 8.5
Oct 6, 2026, 01:02 UTC MITRE
- CVSS severity
  changed from HIGH to CRITICAL
- CVSS vector
  changed from CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C
- CVSS score
  changed from 8.5 to 9.4
- CVSS severity
  changed from CRITICAL to HIGH
- CVSS vector
  changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C to CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D
- CVSS score
  changed from 9.4 to 8.5
Oct 6, 2026, 01:02 UTC MITRE
- CVSS severity
  changed from HIGH to CRITICAL
- CVSS vector
  changed from CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C
- CVSS score
  changed from 8.5 to 9.4
- CVSS severity
  changed from CRITICAL to HIGH
- CVSS vector
  changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C to CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D
- CVSS score
  changed from 9.4 to 8.5
Oct 5, 2026, 23:02 UTC MITRE
- CVSS severity
  changed from HIGH to CRITICAL
- CVSS vector
  changed from CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C
- CVSS score
  changed from 8.5 to 9.4
- CVSS severity
  changed from CRITICAL to HIGH
- CVSS vector
  changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C to CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D
- CVSS score
  changed from 9.4 to 8.5
Oct 5, 2026, 23:02 UTC MITRE
- CVSS severity
  changed from HIGH to CRITICAL
- CVSS vector
  changed from CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C
- CVSS score
  changed from 8.5 to 9.4
- CVSS severity
  changed from CRITICAL to HIGH
- CVSS vector
  changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C to CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D
- CVSS score
  changed from 9.4 to 8.5
Oct 5, 2026, 23:02 UTC MITRE
- CVSS severity
  changed from HIGH to CRITICAL
- CVSS vector
  changed from CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C