CVE-2026-55979

Published: Aug 6, 2026Modified: Aug 26, 2026Deferred

5.2

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L

Exploitability: 2.0 / Impact: 2.7

Source: 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4 (Secondary)

Description

An improper access control check in CatchPulse's named pipe communication interface could allow an attacker to invoke CatchPulse functions. This is limited to operations that enforce more restrictive security policies.

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (2)

https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-098/

Source: 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4

https://www.secureage.com/security-vulnerabilities#

Source: 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4

Timeline

No history available yet.