← Retour aux CVEs
CVE-2026-2697
MEDIUM6.3
Description
An Indirect Object Reference (IDOR) in Security Center allows an authenticated remote attacker to escalate privileges via the 'owner' parameter.
Details CVE
Score CVSS v3.16.3
SeveriteMEDIUM
Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Vecteur d'attaqueNETWORK
ComplexiteLOW
Privileges requisLOW
Interaction utilisateurNONE
Publie2/23/2026
Derniere modification2/26/2026
Sourcenvd
Observations honeypot0
Produits affectes
tenable:security_center
Faiblesses (CWE)
CWE-639
References
https://www.tenable.com/security/tns-2026-07(vulnreport@tenable.com)
Correlations IOC
Aucune correlation enregistree
This product uses data from the NVD API but is not endorsed or certified by the NVD.