CVE-2026-20977

Medium · 5.5

CVSS

5.5

EPSS

0.1%

Published

Feb 4, 2026

CISA due date

—

The record

Improper access control in Emergency Sharing prior to SMR Feb-2026 Release 1 allows local attackers to interrupt its functioning.

Ecosystem	Package	Introduced	Fixed