CVE-2026-43510CWE-266

CISA manage.get.gov insecure portfolio administrative privileges

Medium · published May 7, 2026

CVSS v4.0
5.1
EPSS
1%
Percentile
47.7
In the wild
Unconfirmed
What it is

manage.get.gov is the .gov TLD registrar maintained by CISA. manage.get.gov allows an organization administrator to assign domain manager privileges for domains not already in another organization. Fixed in 1.176.0 on or around 2026-04-30.

The record
Technical detail
CVSS v4.0
5.1 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:H/SA:H
EPSS
0.00594 · 47.7th percentile
Weakness
CWE-266 · Incorrect Privilege Assignment
Published
2026-05-07T18:50Z
EPSS history
Timeline
  • 07 MAY 18:50Z
    CISA manage.get.gov insecure portfolio administrative privileges
    cvelistv5