Threat database

2 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.3	EPSS 0.3%	CVE-2026-103470Grouper · Incorrect Privilege Assignment Critical9.3EPSS 0.3%2026-09-30CVE Database V5CVE-2026-103470 CVE-2026-103470 is a critical privilege escalation vulnerability in Internet2 Grouper before version 7.5.1. It affects configurations where users are allowed to create or edit rules via the User Interface, enabling them to escalate their privileges improperly. EPSS 0.3%Vulnerability Internet2 #cwe-266	CVE Database V5	2026-09-30
Medium	6.5	EPSS 0.3%	CVE-2025-59714Grouper · Incorrect Authorization Medium6.5EPSS 0.3%2025-09-19CVE Database V5CVE-2025-59714 In Internet2 Grouper 5.17.1 before 5.20.5, group admins who are not Grouper sysadmins can configure loader jobs. EPSS 0.3%Vulnerability Internet2 #cwe-863	CVE Database V5	2025-09-19

Showing 1–2 of 2 results