CVE-2026-1772
Medium · 5.3CVSS
5.3
EPSS
0.3%
Published
Feb 24, 2026
CISA due date
—
The record
RTU500 web interface: An unprivileged user can read user management information. The information cannot be accessed via the RTU500 web user interface but requires further tools like browser development utilities to access them without required privileges.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-21099 Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local… CWE-280
- CVE-2026-58416 Fork-PR Actions task can read a third private repository via the collaborative-owner… CWE-280
- CVE-2026-73239 Insecure Direct Object Reference (IDOR) due to missing permission checks for multiple… CWE-280
- CVE-2026-18860 Velociraptor allows multi-tenant deployments named "Orgs". CWE-280
- CVE-2026-45195 Kernel software installed and running inside a Host VM may post improper commands to the… CWE-280
- CVE-2026-41566 Improper Handling of Insufficient Permissions or Privileges vulnerability in Apache… CWE-280
- CVE-2026-40371 Improper handling of insufficient permissions or privileges in Microsoft Dynamics 365… CWE-280
- CVE-2026-11764 When creating an export of all reusable media, the secrets of connected gift cards were… CWE-280