GCVE-110-NCSC-2026-294

Advisory PublishedCVSS 4.9/10

Vulnetix · Advisory published August 12, 2026

An Incorrect Authorization vulnerability in an administrative network zone enables attackers to bypass security controls, gain unauthorized read/write access, and potentially cause denial-of-service without requiring user interaction.

Download JSON Open in Console

Weaknesses (CWE)

CWE-863Incorrect AuthorizationCWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')CWE-95Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CWE-321Use of Hard-coded Cryptographic KeyCWE-122Heap-based Buffer OverflowCWE-327Use of a Broken or Risky Cryptographic AlgorithmCWE-116Improper Encoding or Escaping of Output

Risk Scores

CVSS 3.1

4.9/10

Medium · CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected Products

Vendor	Product	Versions	Platforms
Adobe	vers:unknown/*	—	—

Aliases

CVE-2026-21279 CVE-2026-25652 CVE-2026-34635 CVE-2026-48273 CVE-2026-48362 CVE-2026-48375 CVE-2026-48376 CVE-2026-48384 CVE-2026-48386 CVE-2026-48440 CVE-2026-71383 CVE-2026-71384 CVE-2026-71385 CVE-2026-71386 CVE-2026-71387

References

advisory

Browse GCVE Records

390 records in the GCVE database · Updated August 26, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON