CVE-2026-39452

HighCVSS 7.3/10Last modified Sep 18, 2026

Description

Protection mechanism failure for some Intel(R) Transfer Learning Tool before version v0.7 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via network access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Aug 11, 2026
Last modified
Sep 18, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-394538.3Navigating to a certain URL on the switch’s web server causes the switch to reboot. This can be automated using a tool like curl to create DCVE-2026-394548.5SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD. configure the installation folder with improper file access permission setCVE-2026-394557.5When the BIG-IP Configuration utility is configured to use Lightweight Directory Access Protocol (LDAP) authentication, undisclosed traffic CVE-2026-394577.8When exchanging data over a socket, libnv uses select(2) to wait for data to arrive. However, it does not verify whether the provided sockeCVE-2026-394587.5When a BIG-IP is configured with DNS caching (Such as a DNS profile with caching enabled, SSL Orchestrator, Advanced WAF DoS protection), uCVE-2026-394597.2A vulnerability exists in iControl REST and the TMOS Shell (tmsh) where a highly privileged, authenticated attacker with at least the ManageCVE-2026-39463.5A vulnerability was detected in PHPEMS 11.0. The affected element is an unknown function of the file /index.php?ask=app-ask. Performing a maCVE-2026-394608.1Usernames and passwords, including the default factory credentials, are stored in plaintext within the configuration file. With administratoCVE-2026-394618.8libcasper(3) communicates with helper processes via UNIX domain sockets, and uses the select(2) system call to wait for data to become availCVE-2026-394628.1A vulnerability exists in SenseLive X3050’s web management interface in which password updates are not reliably applied due to improper handCVE-2026-394637.1Unauthenticated Cross Site Scripting (XSS) in ManageWP Worker <= 4.9.31 versions.CVE-2026-394645.5Server-Side Request Forgery (SSRF) vulnerability in SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd coming-soon
CVE-2026-39452: High severity, CVSS 7.3 | Vulnix