Vulnerability record/PUBLISHED/Published Nov 10, 2026 05:39:46 UTC
CVE-2026-12389
A vulnerability that could lead to a high privileged authenticated user performing a remote code execution attack.
Base score8.4/ 10
SeverityHighCVSS 3.1
Exploitability / impact
CVSS metric breakdown
Base severityHigh
Attack vectorAdjacentAV
Attack complexityLowAC
Privileges requiredHighPR
User interactionNoneUI
ScopeChangedS
Confidentiality impactHighC
Integrity impactHighI
Availability impactHighA
CVSS vector string
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:HCVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.
Record context
CVE Numbering AuthorityAxis
Last updatedNov 10, 2026 05:40:12 UTC
PublishedNov 10, 2026 05:39:46 UTC
ReservedJun 16, 2026 11:58:00 UTC
Credits
- Mateusz Mieczkowski (Rexnets)