Threats tagged 'ghsa-22xp-gmqf-mrv3'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.4%	CVE-2026-19928OpenBoxes · CWE-266 Medium5.3EPSS 0.4%2026-08-16GCVE DatabaseCVE-2026-19928 A vulnerability in OpenBoxes up to version 0.9.7 affects the Role Interceptor component, specifically the needManager function. This flaw allows improper privilege management, potentially enabling an attacker to escalate privileges remotely. Public exploit code exists. Upgrading to versions 0.9.8 or 0.9.8-hotfix1 mitigates the issue. EPSS 0.4%Report on CVE-2026-19928 Vulnerability CWE-266 #ghsa-22xp-gmqf-mrv3	GCVE Database	2026-08-16

Page 1 of 1