VULNERABILITY INTELLIGENCE
CVE-2026-20773
EPSS probability0.35%
CISA KEVNot currently listed
Published2026-09-14
Last modified2026-09-18
Description
A role-based access control issue was identified in the administrative expression evaluation functionality. This could allow users with certain administrative roles to access expression testing capabilities beyond their intended permissions.
Weakness classification
- responsible-disclosure@pingidentity.com: CWE-863