Security Advisory

CVE-2026-17601

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-07 16:07:42
Last updated 2026-08-07 18:05:28
Assigner Sonatype
CVSS score 8.9
State PUBLISHED

Description

A user holding a permission to update privilege definitions could modify a wildcard privilege already assigned to their own role to grant broader permissions than they were authorized to hold, including full administrative access, without any additional authorization check or role reassignment.