CVE-2026-0191

HighCVSS 7.8/10Last modified Nov 13, 2026

Description

In event_set_sub of acropora_event.c, there is a possible Logic error due to a logic error in the code. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-693

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published: Nov 10, 2026
Last modified: Nov 13, 2026
NVD status: Awaiting Analysis

Related CVEs from 2026

CVE-2026-01926.7In Bootloader, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privile CVE-2026-01933.3In handle_rx_msg of tipc_virtio_dev, there is a possible Double Fetch TOCTOU due to Double Fetch. This could lead to local information discl CVE-2026-01948.4In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege wi CVE-2026-01954.0In fill of dma.rs, there is a possible way to trigger an out of bounds stack read during direct memory access fills due to a logic error. Th CVE-2026-01974.4In VPU, there is a possible information dislclosure due to a logic error in the code. This could lead to local information disclosure with S CVE-2026-01984.4In is_pd_allowed of gem_msg.c, there is a possible permission bypass due to a missing permission check. This could lead to local information CVE-2026-01997.8In gf_ta_test_set_config of gf_ta_test.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local CVE-2026-02008.8In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege CVE-2026-02036.5An Improper Handling of Exceptional Conditions vulnerability in packet processing of Juniper Networks Junos OS allows an unauthenticated, ne CVE-2026-02048.0A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific CVE-2026-02056.8A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services.CVE-2026-02064.9A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall.