CVE-2026-47367

CriticalCVSS 9.9

Published: 12/06/2026(UTC)Updated: 26/10/2026(UTC)Translated: 14/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.83%

57th percentile - higher than 57% of all known CVEs

Summary

An Improper Input Validation vulnerability in UID Enterprise Agent allows a malicious actor with network access and low privileges to exploit it for Command Injection on the host device.

Risk Assessment

The organization may face unauthorized command execution on devices, potentially leading to data loss or system takeover.

Recommendation

It is recommended to conduct a security audit and update UID Enterprise Agent to mitigate this vulnerability.

Other vulnerabilities in UID Enterprise Agent

CVE-2026-77542Critical
An attacker with network access and high privileges can exploit an improper input validation vulnerability in UID Enterprise Agent to execute a command injection on the host device.

Original NVD description (English source)

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UID Enterprise Agent to execute a Command Injection on the host device.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS