Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 15:11:02 +0000 CVE-2026-65199 — Huawei openUBMC low-privilege SNMP to administrator privilege escalation https://db.gcve.eu/vuln/cve-2026-65199 <p><strong>Affected:</strong> Huawei openBMC</p> <p>openUBMC assigns the full privilege set to pseudo-identities representing SNMP callers. An authenticated, but low-privilege, SNMP user can therefore invoke mapped backend operations as an administrative identity. In `route_mapper/account.lua`, `get_user_privilege` returns the complete nine-privilege set for a `special_users` group that includes the `SNMPv1_v2c` pseudo-user.</p> <p><strong>Affected:</strong> Huawei openBMC</p> <p>openUBMC assigns the full privilege set to pseudo-identities representing SNMP callers. An authenticated, but low-privilege, SNMP user can therefore invoke mapped backend operations as an administrative identity. In `route_mapper/account.lua`, `get_user_privilege` returns the complete nine-privilege set for a `special_users` group that includes the `SNMPv1_v2c` pseudo-user.</p> https://db.gcve.eu/vuln/cve-2026-65199