CVE Catalog
CVE-2026-6181
MediumCVSS 5.9Exploitation Probability (EPSS)
Low risk0.30%
22th percentile - higher than 22% of all known CVEs
Summary
The Device Configuration Framework is vulnerable to an authentication bypass flaw. This flaw can only be exploited after authenticating with a viewer-privileged service account.
Risk Assessment
Authentication bypass could allow unauthorized access to device configuration, potentially leading to unauthorized changes or security breaches.
Recommendation
Update Device Configuration Framework to a patched version and restrict the use of viewer-privileged service accounts.
Original NVD description (English source)
The Device Configuration Framework is vulnerable to an authentication bypass flaw. This flaw can only be exploited after authenticating with a viewer-privileged service account.