CVE-2026-55978

Published: Aug 6, 2026Modified: Aug 26, 2026Deferred

8.4

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H

Exploitability: 2.0 / Impact: 5.8

Source: 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4 (Secondary)

Description

An improper access control vulnerability in CatchPulse could allow a non-administrative local attacker to connect to an unrestricted kernel filter communication port and bypass CatchPulse's security policy enforcement.

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (2)

https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-098/

Source: 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4

https://www.secureage.com/security-vulnerabilities#

Source: 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4

Timeline

No history available yet.