Lucene search
+L

6 matches found

NVD
NVD
•added 2026/09/16 1:18 p.m.•17 views

CVE-2026-88817

An authenticated, non-guest user of Curiosity Workspace could enroll themselves as an administrator and member of an existing access group without an invitation or approval. It did not grant application-wide administrator privileges, and the vulnerability could not be used to obtain root access t...

8.7CVSS0.00351EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/16 12:10 p.m.•16 views

EUVD-2026-80695

An authenticated, non-guest user of Curiosity Workspace could enroll themselves as an administrator and member of an existing access group without an invitation or approval. It did not grant application-wide administrator privileges, and the vulnerability could not be used to obtain root access t...

8.7CVSS5.8AI score0.00351EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/16 12:10 p.m.•36 views

CVE-2026-88817

Curiosity Workspace is affected by a privilege escalation vulnerability in its legacy access group creation endpoint . An authenticated, non-guest user could enroll themselves as an administrator and member of an existing access group without an invitation or approval. However, the flaw did not g...

8.7CVSS5.8AI score0.00351EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/16 12:10 p.m.•52 views

CVE-2026-88817 Privilege escalation via legacy access group creation endpoint

An authenticated, non-guest user of Curiosity Workspace could enroll themselves as an administrator and member of an existing access group without an invitation or approval. It did not grant application-wide administrator privileges, and the vulnerability could not be used to obtain root access t...

8.7CVSS0.00351EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/16 12:10 p.m.•16 views

CVE-2026-88817 Privilege escalation via legacy access group creation endpoint

An authenticated, non-guest user of Curiosity Workspace could enroll themselves as an administrator and member of an existing access group without an invitation or approval. It did not grant application-wide administrator privileges, and the vulnerability could not be used to obtain root access t...

8.7CVSS5.8AI score0.00351EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•3 views

CVE-2026-88817: Improper Privilege Management

An authenticated, non-guest user of Curiosity Workspace could enroll themselves as an administrator and member of an existing access group without an invitation or approval. It did not grant application-wide administrator privileges, and the vulnerability could not be used to obtain root access t...

8.7CVSS5.8AI score0.00351EPSS
SaveExploits0References3
Rows per page
Query Builder