CVE-2021-26262

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Philips MRI 1.5T and MRI 3T Version 5.3 through 5.8.1 does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-286

Affected software

No affected versions have been published.

Timeline

Published
Nov 19, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-262636.1Cross-site scripting (XSS) issue in Discuss app of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote atCVE-2021-262645.5A specially crafted script could cause the DeltaV Distributed Control System Controllers (All Versions) to restart and cause a denial-of-serCVE-2021-262667.5cPanel before 92.0.9 allows a Reseller to bypass the suspension lock (SEC-578).CVE-2021-262677.5cPanel before 92.0.9 allows a MySQL user (who has an old-style password hash) to bypass suspension (SEC-579).CVE-2021-262716.5It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted text into the Styles inCVE-2021-262726.5It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted URL-like text into the CVE-2021-262737.8The Agent in NinjaRMM 5.0.909 has Incorrect Access Control.CVE-2021-262747.1The Agent in NinjaRMM 5.0.909 has Insecure Permissions.CVE-2021-262759.8The eslint-fixer package through 0.1.5 for Node.js allows command injection via shell metacharacters to the fix function. NOTE: This vulneraCVE-2021-262765.3scripts/cli.js in the GoDaddy node-config-shield (aka Config Shield) package before 0.2.2 for Node.js calls eval when processing a set commaCVE-2021-262779.8The framework service handles pendingIntent incorrectly, allowing a malicious application with certain privileges to perform privileged actiCVE-2021-262786.3The wifi module exposes the interface and has improper permission control, leaking sensitive information about the device.
CVE-2021-26262: Medium severity, CVSS 5.5 | Vulnix