CVE-2026-20835

Medium · 5.5

CVSS

5.5

EPSS

0.6%

Published

Jan 13, 2026

CISA due date

—

The record

Out-of-bounds read in Capability Access Management Service (camsvc) allows an authorized attacker to disclose information locally.

Ecosystem	Package	Introduced	Fixed