CVE-2026-94460:詳細資料

CVE-2026-94460

2026-11-04
10h17 +00:00
A01-Broken Access Control
2026-11-09
22h18 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
管理通知

CVE 描述

IRISPowerscan contain an insecure default configuration where the built-in installation account is assigned elevated privileges with a predictable password, which could allow an unauthenticated attacker to gain unauthorised access to privileged application functionality.

CVE 資訊

相關弱點

CWE-ID 弱點名稱 來源
CWE-276 Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.

參考資料