CVE-2026-20851

Medium · 6.2

CVSS

6.2

EPSS

0.6%

Published

Jan 13, 2026

CISA due date

—

The record

Out-of-bounds read in Capability Access Management Service (camsvc) allows an unauthorized attacker to disclose information locally.

Ecosystem	Package	Introduced	Fixed