CVE-2026-41993

MediumCVSS 4.4/10Last modified Jul 27, 2026

Description

Improper Access Control vulnerability in the Removable Media Validation function of TXOne Networks products allows a local attacker with administrator privileges to bypass the file lockdown mechanism, resulting in unauthorized file transfer to the victim device. The attacker needs to deploy unauthorized file on the removable media in advance. This issue affects SafePortAgent: before 3.2.5024; StellarProtect: from 3.2.4011 before 5.0.1083.

Metrics

CVSS 3.1 4.4/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published: Jul 17, 2026
Last modified: Jul 27, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-419994.8Incorrect Behaviour of Views with TCP PROXY Requests CVE-2026-42007.3A security flaw has been discovered in glowxq glowxq-oj up to 6f7c723090472057252040fd2bbbdaa1b5ed2393. This affects the function uploadTest CVE-2026-420008.6Insufficient Validation of Names During AXFR CVE-2026-420017.5Insufficient Validation of Autoprimary SOA Queries CVE-2026-420027.5Concurrency and locking defects in GSS-TSIG CVE-2026-420043.7An attacker can send a crafted EDNS OPT record that will be ignored by DNSdist’s filtering rules, but will be rewritten as a valid OPT recor CVE-2026-420054.3An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The CVE-2026-420064.3An attacker can cause uncontrolled memory usage with excessive bracing over IMAP. The fix in CVE-2026-27857 was incomplete, only blocking on CVE-2026-420079.1An attacker that has valid credentials can use a Sieve script with the editheader extension to trigger a use-after-free in the mail editing CVE-2026-420084.3Forwarding information received from a host listed as a trusted proxy is not kept separate from Dovecot's own authentication fields, so a va CVE-2026-420097.5A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic CVE-2026-42017.3A weakness has been identified in glowxq glowxq-oj up to 6f7c723090472057252040fd2bbbdaa1b5ed2393. This vulnerability affects the function U