PT-2026-30873
CVE-2026-5378
·
Published
2026-04-07
·
Updated
2026-04-07
Description by
CVSS 3.1
6.8
MediumMetricsAV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
runZero Platform versions prior to 4.0.260203.0
Description
An issue allowed administrators to create and update users outside of their authorized organization scope. This is an instance of CWE-863: Incorrect Authorization.
Recommendations
Update to version 4.0.260203.0 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾