CVE-2026-78319CWE-367

CVE-2026-78319

published September 1, 2026

CVSS

9.3

EPSS

Percentile

48.3

In the wild

Unconfirmed

What it is

A service running on the affected products contains a potential Time-of-Check Time-of-Use (TOCTOU) race condition.

An unauthenticated remote attacker could exploit this race condition to bypass intended security controls.

This may result in the execution of unauthorized code.

The record

Technical detail

CVSS: 9.3 · NONE
CVSS v4.0: 9.3 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS: 0.00607 · 48.3th percentile
Weakness: CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition
Published: 2026-09-01T11:16Z

References (2)

EPSS history

Timeline