https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-15T15:11:37.118068+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-65199 CVE-2026-65199 — Huawei openUBMC low-privilege SNMP to administrator privilege escalation 2026-10-15T15:11:37.119104+00:00

Affected: Huawei openBMC

openUBMC assigns the full privilege set to pseudo-identities representing SNMP callers. An authenticated, but low-privilege, SNMP user can therefore invoke mapped backend operations as an administrative identity. In `route_mapper/account.lua`, `get_user_privilege` returns the complete nine-privilege set for a `special_users` group that includes the `SNMPv1_v2c` pseudo-user.