CVE-2026-0240
HighCVSS 8.7Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
An information disclosure vulnerability in Trust Protection Foundation allows an authenticated attacker to access sensitive data from the server's vault. Exploitation enables impersonation of any user and arbitrary modification of configuration settings.
Risk Assessment
The risk includes full environment compromise through identity takeover and unauthorized configuration changes, potentially leading to system integrity and confidentiality breaches.
Recommendation
Apply the vendor-supplied patch for Trust Protection Foundation immediately and restrict authenticated user privileges to the minimum necessary.
Other vulnerabilities in Trust Protection Foundation
Original NVD description (English source)
An information disclosure vulnerability in Trust Protection Foundation enables an authenticated attacker to obtain sensitive information from the server's vault. Successful exploitation of this issue allows the attacker to impersonate any user within the environment and arbitrarily modify configuration settings.