← Back to search

CVE-2026-107510

9.1 CRITICAL

Published 2026-10-08 · Updated 2026-10-09

AI risk analysis

Summary
A high-privilege user can inject arguments into troubleshooting commands, leading to privilege escalation.
Exploitability
Exploitation requires an authenticated high-privilege user and knowledge of specific troubleshooting commands, making it moderately difficult.
Blast radius
If exploited, the attacker could gain full system control, potentially leading to widespread damage.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Disable or restrict access to the affected troubleshooting commands.
auth-bypasspriv-escalationcommand-injection

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

An authenticated high privilege user can inject arguments in troubleshooting commands resulting in privilege escalation.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-88, CWE-269, CWE-284

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.