CVE-2026-27912
High · 8.0CVSS
8.0
EPSS
0.4%
Published
Apr 14, 2026
CISA due date
—
The record
Improper authorization in Windows Kerberos allows an authorized attacker to elevate privileges over an adjacent network.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-62989 Shopper is a Headless e-commerce Admin Panel. CWE-285
- CVE-2026-119330 Immich is a high-performance self-hosted photo and video management solution. CWE-285
- CVE-2026-55551 ZAC is an open-source, workflow-based Common Ground component for Dutch municipal case… CWE-285
- CVE-2026-112905 Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or… CWE-285
- CVE-2026-104316 IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to cancel any… CWE-285
- CVE-2026-113696 Improper authorization in the SmartIT change approval feature of BMC IT Service… CWE-285
- CVE-2026-113694 Improper authorization in the SmartIT user attachment feature of BMC IT Service… CWE-285
- CVE-2026-42949 A authorization bypass vulnerability exists in the /api/runscript functionality of FUXA… CWE-285