CVE-2026-46748
High · 8.8CVSS
8.8
EPSS
0.3%
Published
Jun 9, 2026
CISA due date
—
The record
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The affected system includes a binary that is configured with the cap_dac_override capability. This capability allows the process to bypass file system permission checks, resulting in unrestricted file system access. This could allow a local attacker to escalate privileges leading to arbitrary file modification and gaining root privileges on the system.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-79942 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-250
- CVE-2026-87506 Privilege elevation in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote… CWE-250
- CVE-2026-69464 Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized… CWE-250
- CVE-2026-69409 Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized… CWE-250
- CVE-2026-80238 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-250
- CVE-2026-83534 PostgreSQL Anonymizer contains a vulnerability in the anon.anonymize_database_parallel()… CWE-250
- CVE-2026-72654 Execution with Unnecessary Privileges (CWE-250) in the Kibana machine learning feature… CWE-250
- CVE-2026-70496 A flaw was found in search-v2-operator. CWE-250