CVE-2026-20991
Medium · 4.4CVSS
4.4
EPSS
0.1%
Published
Mar 16, 2026
CISA due date
—
The record
Improper privilege management in ThemeManager prior to SMR Mar-2026 Release 1 allows local privileged attackers to reuse trial contents.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|