CVE-2026-51119

CriticalCVSS 9.1

Published: 10/07/2026(UTC)Updated: 10/07/2026(UTC)Translated: 11/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.38%

30th percentile - higher than 30% of all known CVEs

Summary

An issue in Invixium IXM WEB v.2.3.85.25 allows an attacker to escalate privileges via the /SystemUsers/CreateAppUser component. This vulnerability can be exploited to gain unauthorized administrative access.

Risk Assessment

The risk involves potential takeover of the system by an unauthorized user, leading to data confidentiality and integrity breaches as well as system disruption.

Recommendation

Immediately update Invixium IXM WEB to the latest available version and restrict access to the /SystemUsers/CreateAppUser component to trusted administrators only.

Original NVD description (English source)

An issue in Invixium IXM WEB v.2.3.85.25 allows an attacker to escalate privileges via the /SystemUsers/CreateAppUser components