CVE-2026-73769
HighCVSS 7.2Summary
A vulnerability in the web-based management interface of vulnerable CPPM systems could allow an authenticated remote attacker to achieve remote code execution, allowing arbitrary command execution on the underlying operating system.
Risk Assessment
An authenticated attacker could gain full control of the system, potentially leading to severe compromise.
Recommendation
Apply vendor patches for CPPM and restrict access to the management interface.
Other vulnerabilities in CPPM
See all- CVE-2026-73787High
A vulnerability in the CPPM web interface could allow an authenticated remote attacker to access directory information on a vulnerable system, and successful exploitation could allow arbitrary command execution on the underlying operating system.
- CVE-2026-73786High
A vulnerability in the web-based management interface of CPPM could allow an unauthenticated remote attacker to conduct a Denial-of-Service (DoS) attack, causing instability and performance degradation of the vulnerable CPPM server.
Original NVD description (English source)
A vulnerability in the web-based management interface of vulnerable CPPM systems could allow an authenticated remote attacker to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.