CVE-2026-20987
NoneCVSS
—
EPSS
0.2%
Published
Feb 4, 2026
CISA due date
—
The record
Improper input validation in GalaxyDiagnostics prior to version 3.5.050 allows local privileged attackers to execute privileged commands.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|