CVE-2026-20463
Medium · 6.7CVSS
6.7
EPSS
0.2%
Published
Jul 1, 2026
CISA due date
—
The record
In Modem, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: MOLY01716533; Issue ID: MSV-6309.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-3322 Due to improper permission checks in Lobster_pro, attackers are able to interact with… CWE-280
- CVE-2026-21099 Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local… CWE-280
- CVE-2026-58416 Fork-PR Actions task can read a third private repository via the collaborative-owner… CWE-280
- CVE-2026-73239 Insecure Direct Object Reference (IDOR) due to missing permission checks for multiple… CWE-280
- CVE-2026-18860 Velociraptor allows multi-tenant deployments named "Orgs". CWE-280
- CVE-2026-62393 Improper Handling of Insufficient Permissions or Privileges vulnerability in Apache… CWE-280
- CVE-2026-45196 Kernel software installed and running inside a Host VM may post improper commands to the… CWE-280
- CVE-2026-45195 Kernel software installed and running inside a Host VM may post improper commands to the… CWE-280