CVE-2026-22914CWE-266

An attacker with limited permissions may still be able to write files to specific locations on the device, potentially leading to system manipulation

Medium · published January 15, 2026

CVSS v3.1
4.3
EPSS
0%
Percentile
22.5
In the wild
Unconfirmed
What it is

An attacker with limited permissions may still be able to write files to specific locations on the device, potentially leading to system manipulation.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00309 · 22.5th percentile
Weakness
CWE-266 · Incorrect Privilege Assignment
Published
2026-01-15T13:06Z
EPSS history
Timeline
  • 15 JAN 13:06Z
    An attacker with limited permissions may still be able to write files to specific locations on the device, potentially leading to system manipulation
    cvelistv5