CVE Catalog
CVE-2026-50770
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.21%
11th percentile - higher than 11% of all known CVEs
Summary
An issue in Squirro Cognitive Search before version 3.14.2 allows a remote attacker to escalate privileges via a crafted request. This vulnerability enables unauthorized elevation of access levels.
Risk Assessment
An attacker can gain higher privileges in the system, potentially leading to unauthorized access to sensitive data or full control over the application.
Recommendation
Update Squirro Cognitive Search to version 3.14.2 or later. Conduct a privilege audit and restrict user roles to the minimum necessary.
Original NVD description (English source)
An issue in Squirro Cognitive Search before v.3.14.2 allows a remote attacker to escalate privileges via a crafted request.