VULNERABILITY INTELLIGENCE

CVE-2026-9717

CVSS score7.2 HIGH
EPSS probability1.73%
CISA KEVNot currently listed
Published2026-06-25
Last modified2026-10-25
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

CWE-78 Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could allow unauthorized execution of commands with elevated privileges, impacting system integrity, confidentiality, and availability when a privileged authenticated user interacts with a vulnerable network-exposed service.

Weakness classification

  • cybersecurity@se.com: CWE-78

Primary references