PT-2026-25596
CVE-2026-20991
·
Publicado
2026-03-16
·
Atualizado
2026-03-17
Descrição por
CVSS 4.0
6.7
MédiaMétricasAV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
ThemeManager versions prior to SMR Mar-2026 Release 1
Description
Improper privilege management in ThemeManager prior to SMR Mar-2026 Release 1 allows local privileged attackers to reuse trial contents. This issue involves a flaw in how privileges are handled, potentially enabling malicious actors with local access to exploit the system.
Recommendations
Update ThemeManager to SMR Mar-2026 Release 1 or a later version.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾