CVE Catalog

CVE-2026-56654

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.16%

5th percentile - higher than 5% of all known CVEs

Summary

The vulnerability allows privilege escalation via access token scope escalation in the API.

Risk Assessment

An attacker with a limited token can gain unauthorized access to administrative functions or sensitive data.

Recommendation

Update the system and review API token permissions.

Original NVD description (English source)

Privilege Escalation via Access Token Scope Escalation in API

Vulnerability data from NVD (NIST) · CISA KEV · EPSS