CVE-2026-73787
HighCVSS 7.2Summary
A vulnerability in the CPPM web interface could allow an authenticated remote attacker to access directory information on a vulnerable system, and successful exploitation could allow arbitrary command execution on the underlying operating system.
Risk Assessment
An authenticated attacker could gain control of the system, potentially leading to full compromise.
Recommendation
Apply vendor-provided patches for CPPM and restrict access to the web interface.
Other vulnerabilities in CPPM
See all- CVE-2026-73786High
A vulnerability in the web-based management interface of CPPM could allow an unauthenticated remote attacker to conduct a Denial-of-Service (DoS) attack, causing instability and performance degradation of the vulnerable CPPM server.
- CVE-2026-73769High
A vulnerability in the web-based management interface of vulnerable CPPM systems could allow an authenticated remote attacker to achieve remote code execution, allowing arbitrary command execution on the underlying operating system.
Original NVD description (English source)
A vulnerability in the CPPM web interface could allow an authenticated remote attacker to access directory information on a vulnerable system. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.