CVE-2025-48643
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk0th percentile - higher than 0% of all known CVEs
Summary
In multiple locations there is a possible provisioning bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed.
Risk Assessment
The organization may be exposed to local privilege escalation, potentially leading to unauthorized access to systems and data.
Recommendation
It is recommended to review and improve input validation in applications to minimize the risk of provisioning bypass.
Other vulnerabilities in Nieokreślony komponent
See all- CVE-2024-43384High
A low privileged remote attacker can gain the root password due to improper removal of sensitive information before storage or transfer.
- CVE-2026-3999High
A vulnerability related to broken access control may allow an authenticated user to perform horizontal privilege escalation. It only affects specific configurations.
- CVE-2026-0064Medium
There is a possible persistent denial of service due to resource exhaustion in multiple places. This could lead to local denial of service with no additional execution privileges needed.
Original NVD description (English source)
In multiple locations there is a possible provisioning bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.