Lucene search
+L

56 matches found

Kitploit
Kitploit
•added 2026/11/13 4:17 a.m.•73 views

CVE-2026-93616-check

Check Point Security Management Unauthenticated RCE — Vulnerability Detection Script An unauthenticated patch-state check for CVE-2026-93616, the unauthenticated directory traversal in the Check Point Security Management CPM server that reaches Runtime.exec, fixed in sk1000171 on 2026-09-22...

9.8CVSS9AI score0.91605EPSS
SaveExploits5
Positive Technologies
Positive Technologies
•added 2026/11/10 12:00 a.m.•5 views

PT-2026-144487

In cpm mbox power ctrl sswrp of cpm mbox.c, there is a possible permission bypass due to a precondition check failure. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

6AI score0.00126EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/29 12:00 a.m.•15 views

PT-2026-132316

P-Net before 1.0.3 contains an integer underflow in pf cpm c data ind. When handling a received cyclic data frame while the consumer is in the FRUN or RUN state, the offset of the APDU status was computed as the frame length minus 4 using 16-bit arithmetic, without checking that the frame is long...

7.1CVSS5.9AI score0.00165EPSS
SaveExploits0References2
GithubExploit
GithubExploit
•added 2026/10/01 2:32 p.m.•46 views

Exploit for Path Traversal in Checkpoint Multi-Domain_Security_Management

Check Point Security Management Unauthenticated RCE — Vulnerab...

9.8CVSS8.8AI score0.91605EPSS
SaveExploits5
NVD
NVD
•added 2026/09/15 7:17 p.m.•16 views

CVE-2026-56922

In CPM, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

6.7CVSS0.00095EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/15 7:17 p.m.•18 views

CVE-2026-0183

In CPM, there is a possible information disclosure due to a confused deputy. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

4.4CVSS0.0009EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/15 6:33 p.m.•33 views

CVE-2026-56922

A permission bypass vulnerability exists in the CPM component due to a confused deputy issue. This flaw could allow for local escalation of privilege with System execution privileges required. Exploitation of this vulnerability does not require user interaction. Affected Google Pixel devices can ...

6.7CVSS5.9AI score0.00095EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2026/09/15 6:33 p.m.•16 views

EUVD-2026-78965

In CPM, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

6.7CVSS5.9AI score0.00095EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/15 6:33 p.m.•24 views

CVE-2026-56922

In CPM, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

5.9AI score0.00095EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:33 p.m.•48 views

CVE-2026-56922

In CPM, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

0.00095EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/15 6:33 p.m.•20 views

CVE-2026-0183

In CPM, there is a possible information disclosure due to a confused deputy. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

5.8AI score0.0009EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/15 6:33 p.m.•71 views

CVE-2026-0183

A confused deputy vulnerability in CPM allows for a possible local information disclosure . Exploitation of this flaw requires System execution privileges , but does not require user interaction. No specific exploit details or remediation steps are provided in the documents.

4.4CVSS5.8AI score0.0009EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/09/15 6:33 p.m.•48 views

CVE-2026-0183

In CPM, there is a possible information disclosure due to a confused deputy. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

0.0009EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/15 6:33 p.m.•23 views

EUVD-2026-79150

In CPM, there is a possible information disclosure due to a confused deputy. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

4.4CVSS5.8AI score0.0009EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•11 views

CVE-2026-0183: Unintended Proxy or Intermediary

In CPM, there is a possible information disclosure due to a confused deputy. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

4.4CVSS5.8AI score0.0009EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•26 views

PT-2026-92316

Name of the Vulnerable Software and Affected Versions CPM affected versions not specified Description A permission bypass exists due to a confused deputy, which is a security issue where a privileged entity is tricked by a less privileged entity into performing an action it is not authorized to d...

6.7CVSS5.8AI score0.00095EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•10 views

CVE-2026-56922: Unintended Proxy or Intermediary

In CPM, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

6.7CVSS5.9AI score0.00095EPSS
SaveExploits0References3
osv_pub
osv_pub
•added 2026/09/01 12:00 a.m.•31 views

PUB-A-510831894

In CPM, there is a possible information disclosure due to a confused deputy. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

4.4CVSS5.8AI score0.0009EPSS
SaveExploits0References1
osv_pub
osv_pub
•added 2026/09/01 12:00 a.m.•29 views

PUB-A-510475578

In CPM, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

6.7CVSS5.8AI score0.00095EPSS
SaveExploits0References1
osv_pub
osv_pub
•added 2026/09/01 12:00 a.m.•29 views

PUB-A-513139951

In CPM, there is a possible permission bypass due to an insecure default value. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

5.8AI score
SaveExploits0References1
Rows per page
Query Builder