PT-2026-145841
CVE-2026-120490
·
Published
2026-11-12
·
Updated
2026-11-12
Description by
CVSS 3.1
3.8
LowMetricsAV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
On Scalable Platforms, an administrator with permissions to edit and install the Access Control Policy and NAT rules can create a NAT rule that redirects traffic to the Gateway's Sync interface, bypassing the built-in Sync protection. This could allow the administrator to execute operating system commands and write files on the Gateway with superuser privileges.
Found an issue in the description? Have something to add? Feel free to write us 👾