CVE-2026-59597

A logic error in the bindDataService method of DataServiceManager.java allows an attacker to retain privileged tunnel management permissions during configuration updates. This vulnerability facilitates a local escalation of privilege without requiring additional execution privileges or user inter...

PUB-A-510830555

In bindDataService of DataServiceManager.java, there is a possible way to retain privileged tunnel management permissions across configuration updates due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...