CVE-2026-88235

Name of the Vulnerable Software and Affected Versions Servicing Stack Updates (affected versions not specified)

Description An unintended proxy or intermediary, known as a confused deputy, in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. A confused deputy is a security situation where a privileged entity is tricked by a less privileged entity into performing an action on its behalf.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.