CVE-2026-2460CWE-267

A vulnerability exists in REB500 for an authenticated user with low-level privileges to access and alter the content of directories by using the DAC protocol…

High · published February 24, 2026

CVSS v4.0
7.6
EPSS
0%
Percentile
23.0
In the wild
Unconfirmed
What it is

A vulnerability exists in REB500 for an authenticated user with low-level privileges to access and alter the content of directories by using the DAC protocol that the user is not authorized to do so.

The record
Technical detail
CVSS v4.0
7.6 · HIGH
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00313 · 23.0th percentile
Weakness
CWE-267 · Privilege Defined With Unsafe Actions
Published
2026-02-24T13:24Z
EPSS history
Timeline
  • 24 FEB 13:24Z
    A vulnerability exists in REB500 for an authenticated user with low-level privileges to access and alter the content of directories by using the DAC protocol…
    cvelistv5