Security Advisory

CVE-2026-12663

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-09-01 13:30:42
Last updated 2026-09-01 15:44:41
Assigner Rockwell
CVSS score 7.0
State PUBLISHED

Description

A security issue exists within ControlFLASH™, where the installer grants write permissions to the "Everyone" group on a product installation directory. This could allow arbitrary code execution, resulting in an attacker being given the ability to run any commands or code of the attacker's choice on a target machine at the logged-in user's permission level.