CVE-2026-68591
Medium · 6.7CVSS
6.7
EPSS
0.1%
Published
Nov 2, 2026
CISA due date
—
The record
In Modem, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalation of privilege (EoP) if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09608864 / ALPS09327759; Issue ID: MSV-2958.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-120066 On Unix-like systems, when logging is enabled, psqlODBC creates its log files in /tmp by… CWE-732
- CVE-2026-91906 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission… CWE-732
- CVE-2026-91904 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission… CWE-732
- CVE-2026-111499 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission… CWE-732
- CVE-2026-118574 Incorrect Permission Assignment for Critical Resource vulnerability in Drupal S3 File… CWE-732
- CVE-2026-107060 Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to… CWE-732
- CVE-2026-107055 Insecure permissions in the autosave component of AppML neutriNote CE versionCode 1387… CWE-732
- CVE-2026-107047 Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers… CWE-732