CVE-2026-2459CWE-267

A vulnerability exists in REB500 for an authenticated user with Installer role to access and alter the contents of directories that the role is not authorized…

High · published February 24, 2026

CVSS v4.0
7.4
EPSS
0%
Percentile
29.9
In the wild
Unconfirmed
What it is

A vulnerability exists in REB500 for an authenticated user with Installer role to access and alter the contents of directories that the role is not authorized to do so.

The record
Technical detail
CVSS v4.0
7.4 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00372 · 29.9th percentile
Weakness
CWE-267 · Privilege Defined With Unsafe Actions
Published
2026-02-24T13:21Z
EPSS history
Timeline
  • 24 FEB 13:21Z
    A vulnerability exists in REB500 for an authenticated user with Installer role to access and alter the contents of directories that the role is not authorized…
    cvelistv5