← CVE index
Vulnerability record/PUBLISHED/Published Nov 10, 2026 05:39:46 UTC

CVE-2026-12389

A vulnerability that could lead to a high privileged authenticated user performing a remote code execution attack.

Base score8.4/ 10
SeverityHighCVSS 3.1

Exploitability / impact

CVSS metric breakdown

Vector-derived attributes
Base severityHigh
Attack vectorAdjacentAV
Attack complexityLowAC
Privileges requiredHighPR
User interactionNoneUI
ScopeChangedS
Confidentiality impactHighC
Integrity impactHighI
Availability impactHighA
CVSS vector stringCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.

Record context

CVE Numbering AuthorityAxis
Last updatedNov 10, 2026 05:40:12 UTC
PublishedNov 10, 2026 05:39:46 UTC
ReservedJun 16, 2026 11:58:00 UTC

Credits

  • Mateusz Mieczkowski (Rexnets)