CVE-2026-63727

HighCVSS 8.8/10Last modified Oct 24, 2026

Description

Anchore Enterprise versions from 5.11.0 to 5.27.1 and 6.0.0 contain an improper privilege escalation vulnerability in the user management API. An authenticated attacker who is able to access the Anchore Enterprise API could issue an API call capable of modifying user permissions to gain access to additional resources and operations. It is not possible to grant the system-admin role, but a read only user could be granted write access. This issue is fixed in Anchore Enterprise 5.27.2 and 6.0.1.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-648

Affected software

No affected versions have been published.

Timeline

Published: Jul 28, 2026
Last modified: Oct 24, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-637286.3Gitleaks prior to 8.30.1 contains a template injection vulnerability that allows attackers who can supply or influence report templates to r CVE-2026-637296.6The SyncTeX parser (synctex_parser.c) shipped with TeX Live and embedded by downstream consumers such as GNOME Evince contains a heap use-af CVE-2026-63736.5Exposure of sensitive system information to an unauthorized control sphere vulnerability in Zyxel Networks WAH7601 allows Web Application Fi CVE-2026-637305.0HyperDX before 2.31.0 contains a server-side request forgery vulnerability that allows authenticated team members to direct the server to ma CVE-2026-637317.7HyperDX before 2.31.0 contains a server-side request forgery vulnerability that allows authenticated team members to direct the server to ar CVE-2026-637329.99router 0.4.59 (fixed in 0.4.60) contains a chain of vulnerabilities: a hardcoded default password (123456) that authenticates any fresh ins CVE-2026-637336.5SurrealDB versions before 3.2.0 contain a permissions bypass vulnerability where data-modifying statements within PERMISSIONS clauses execut CVE-2026-637344.9SurrealDB versions before 3.2.0 contain a denial of service vulnerability in the SurrealML header parser that allows authenticated Owner-rol CVE-2026-637358.1SurrealDB versions before 3.2.0 fail to validate namespace and database scope in custom API routes, allowing authenticated users to invoke e CVE-2026-637364.1SurrealDB before 3.2.0 contains a server-side request forgery vulnerability in the JWKS fetcher that validates only the URL hostname string CVE-2026-637376.5SurrealDB versions before 3.1.5 contain a denial of service vulnerability where authenticated users can crash the server with queries contai CVE-2026-637384.3SurrealDB versions 3.1.0 before 3.1.5 fail to enforce field-level SELECT permissions when records are accessed through graph-edge or back-re