CVE-2026-71384
Critical · CVSS 9.6- CVSS
- 9.6
- nvd
- EPSS
- 0.24%
- 16th pct
- KEV
- No
- Class
- other
- CWE-863
Description
is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access, potentially resulting in an application denial-of-service condition. The vulnerable component is restricted to an administrative network zone by default. Exploitation of this issue does not require user interaction. Scope is changed.
References
Status: profiled · ingested 2026-08-20T18:00:49.000Z