CVE-2026-109849

Publié : 5 novembre 2026

Modifié : 5 novembre 2026

Score CVSS

6.5

MEDIUM

Description détaillée

Incorrect privilege assignment issue exists in Hinemos. If this vulnerability is exploited, an attacker who can access the password change API with specific permissions that can be assigned to non-administrative users may change the password of an administrative user.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Références et Patchs

https://jvn.jp/en/jp/JVN46901199/https://www.hinemos.info/news/hinemos-vulnerability-20261104

Dernières Vulnérabilités

CVE-2026-69068

Insufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory.

VOIR DÉTAILS

CVE-2026-69066

Memory corruption in GPU driver due to improper validation of VMID reservation.

VOIR DÉTAILS

CVE-2026-69050

Out-of-bounds memory access in a device driver due to improper resource state tracking.

VOIR DÉTAILS