CVE-2026-20987

Improper input validation in GalaxyDiagnostics prior to version 3.5.050 allows local privileged attackers to execute privileged commands

High · published February 4, 2026

CVSS v4.0
8.7
EPSS
0%
Percentile
4.1
In the wild
Unconfirmed
What it is

Improper input validation in GalaxyDiagnostics prior to version 3.5.050 allows local privileged attackers to execute privileged commands.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS
0.00153 · 4.1th percentile
Published
2026-02-04T06:14Z
EPSS history
Timeline
  • 04 FEB 06:14Z
    Improper input validation in GalaxyDiagnostics prior to version 3.5.050 allows local privileged attackers to execute privileged commands
    cvelistv5