CVE-2026-55979CWE-284broken-access-control

CVE-2026-55979

Medium · published August 6, 2026

CVSS v3.1
5.2
EPSS
0%
Percentile
2.6
In the wild
Unconfirmed
What it is

An improper access control check in CatchPulse's named pipe communication interface could allow an attacker to invoke CatchPulse functions. This is limited to operations that enforce more restrictive security policies.

The record
Technical detail
CVSS v3.1
5.2 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00133 · 2.6th percentile
Weakness
CWE-284 · Improper Access Control
Published
2026-08-06T14:16Z
References (2)
https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-098/ · 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4https://www.secureage.com/security-vulnerabilities# · 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4
EPSS history
Timeline
  • 06 AUG 09:20Z
    Improper access control check in CatchPulse's named pipe communication interface
    cvelistv5