CVE-2026-49190
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
The system fails to evaluate instructional permissions over multiple internal operation codes (opcodes), permitting unauthorized application installations or command executions.
Risk Assessment
An unauthorized user can install applications or execute commands, potentially leading to privilege escalation and system integrity compromise.
Recommendation
Apply the vendor patch that introduces proper permission checks for all opcodes.
Other vulnerabilities in System
See all- CVE-2026-22909High
Certain system functions may be accessed without proper authorization, allowing attackers to start, stop, or delete installed applications, potentially disrupting system operations.
- CVE-2026-9651Medium
CWE-732 Incorrect Permission Assignment for Critical Resource vulnerability could cause unauthorized disclosure of password hashes. An attacker with privileged local access can read improperly protected system files, potentially leading to account compromise.
- CVE-2023-35691High
There is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with System execution privileges needed.
Original NVD description (English source)
The system fails to evaluate instructional permissions over multiple internal operation codes (opcodes), permitting unauthorized application installations or command executions.