CVE-2026-20595
Medium · 6.7CVSS
6.7
EPSS
0.1%
Published
Nov 2, 2026
CISA due date
—
The record
In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11263078; Issue ID: MSV-9001.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-111107 A NULL pointer dereference vulnerability in WatchGuard Fireware OS’s management interface… CWE-1286
- CVE-2026-110675 Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl accept malformed UTF-8 in bare… CWE-1286
- CVE-2026-83728 Improper validation of syntactic correctness of input in Windows Hyper-V allows an… CWE-1286
- CVE-2026-83611 xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and… CWE-1286
- CVE-2026-72916 Mastodon is a free, open-source social network server based on ActivityPub. CWE-1286
- CVE-2026-0931 Denial-of-service vulnerability in M-Files Server versions before 26.5.16015.3 allows an… CWE-1286
- CVE-2026-25292 Memory Corruption when processing untrusted user input in the fastboot command handler… CWE-1286
- CVE-2026-57026 An Improper Validation of Syntactic Correctness of Input vulnerability in the SIP plugin… CWE-1286