CVE-2026-12059CWE-1284

Cellopoint｜CelloOS - Improper Access Control

High · published June 12, 2026

CVSS v4.0
8.7
EPSS
0%
Percentile
38.1
In the wild
Unconfirmed
What it is

The SSH service of CelloOS developed by Cellopoint has an Improper Access Control vulnerability, allowing authenticated remote attackers to bypass the enforced command restrictions and execute operating system commands outside the originally authorized scope.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00450 · 38.1th percentile
Weakness
CWE-1284 · Improper Validation of Specified Quantity in Input
Published
2026-06-12T06:30Z
EPSS history
Timeline
  • 12 JUN 06:30Z
    Cellopoint｜CelloOS - Improper Access Control
    cvelistv5