CVE-2026-9063
MediumCVSS 6.7Summary
A locally authenticated user can achieve privilege escalation via an insecure configuration that leads to unauthorized code execution. This flaw can only be exploited after authenticating with an admin-privileged service account.
Risk Assessment
Exploitation by an authenticated user may lead to unauthorized code execution and privilege escalation.
Recommendation
Fix the insecure configuration, restrict use of admin-privileged service accounts, and apply updates.
Other vulnerabilities in Nieokreślony komponent
See all- CVE-2026-8372High
The vulnerability could allow an attacker to gain unauthorized access. The description does not specify which resource is affected or the conditions for exploitation.
- CVE-2026-12964High
The vulnerability allows privilege escalation of a viewer account to administrator privileges. The description does not identify a specific component or exploitation conditions.
- CVE-2026-12389High
The vulnerability could lead to a high privileged authenticated user performing a remote code execution attack. The description does not identify a specific component.
- CVE-2026-3999High
A vulnerability related to broken access control may allow an authenticated user to perform horizontal privilege escalation. It only affects specific configurations.
- CVE-2026-13312Critical
The described vulnerability could allow an attacker to compromise a system. Technical details are not provided in the description.
- CVE-2026-0064Medium
There is a possible persistent denial of service due to resource exhaustion in multiple places. This could lead to local denial of service with no additional execution privileges needed.
- CVE-2025-48643High
In multiple locations there is a possible provisioning bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed.
- CVE-2024-43384High
A low privileged remote attacker can gain the root password due to improper removal of sensitive information before storage or transfer.
Original NVD description (English source)
A locally authenticated user can achieve privilege escalation via an insecure configuration that leads to unauthorized code execution. This flaw can only be exploited after authenticating with an admin-privileged service account.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS