CVE-2026-26053
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
An Incorrect Privilege Assignment (CWE-266) vulnerability in the Command Centre Server allows an authenticated operator with limited privileges to perform operations they would not normally be authorized to do. Affected versions: 9.50 prior to MR1, 9.40 prior to MR3, 9.30 prior to MR5, 9.20 prior to MR7, and all versions of 9.10.
Risk Assessment
The risk involves potential privilege escalation by an operator, leading to unauthorized access to sensitive system functions, potentially compromising data integrity and confidentiality.
Recommendation
Immediately update Command Centre Server to versions: 9.50 MR1, 9.40 MR3, 9.30 MR5, 9.20 MR7 or later. For version 9.10, migrate to a supported version.
Original NVD description (English source)
An Incorrect Privilege Assignment (CWE-266) vulnerability in the Command Centre Server allows an authenticated operator with limited privileges to perform some operations that they would not normally be authorized to perform. Version of Command Centre affected: 9.50 prior to vEL9.50.1587(MR1), 9.40 prior to vEL9.40.3130(MR3), 9.30 prior to vEL9.30.3983(MR5), 9.20 prior to vEL9.20.4349(MR7), all versions of 9.10.