VULNERABILITY INTELLIGENCE
CVE-2026-40145
CVSS score7.1 HIGH
EPSS probability0.15%
CISA KEVNot currently listed
Published2026-08-17
Last modified2026-10-23
CVSS vectorCVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Description
A vulnerability exists in the interaction between a Endpoint Privilege Management (Windows Deployment) support utility and the agent's tamper protection controls. Under certain conditions, the protections applied to the utility process may not be enforced as intended.
Weakness classification
- CWE-1220: Insufficient Granularity of Access Control