Vulnerabilities CVE-2026-33390

CVE-2026-33390

High

Open

TLP:CLEAR

Incorrect privilege assignment for Arc sensors in Guardian/CMC before 26.2.0

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

An Incorrect Privilege Assignment vulnerability was discovered in the synchronization functionality due to Arc sensors receiving CLI permissions. An authenticated user with limited privileges can push administrative CLI commands through the sync, altering the device configuration, and/or affecting its availability.

Details

CVSS Score: 7.2
EPSS Score ⓘ: 0.21%

11.4th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
Confidence: 90%
Published: Jul 9, 2026
Last Modified: Aug 11, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.