CVE-2026-55979
MediumCVSS 5.2Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
An improper access control check in CatchPulse's named pipe communication interface could allow an attacker to invoke CatchPulse functions. This is limited to operations that enforce more restrictive security policies.
Risk Assessment
Risk of unauthorized invocation of CatchPulse functions, potentially leading to security policy violations.
Recommendation
Update CatchPulse to a patched version and implement appropriate access controls for named pipes.
Other vulnerabilities in CatchPulse
See all- CVE-2026-55980Medium
A denial-of-service vulnerability in CatchPulse could allow an attacker to conduct a stack buffer overrun attack, leading to a denial-of-service condition.
- CVE-2026-55978High
An improper access control vulnerability in CatchPulse could allow a non-administrative local attacker to connect to an unrestricted kernel filter communication port and bypass CatchPulse's security policy enforcement.
Original NVD description (English source)
An improper access control check in CatchPulse's named pipe communication interface could allow an attacker to invoke CatchPulse functions. This is limited to operations that enforce more restrictive security policies.