CVE-2026-77092

CriticalCVSS 9.8/10Last modified Sep 11, 2026

Description

Content Extractor contained a deserialization of untrusted data issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update Content Extractor.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-502

Affected software

No affected versions have been published.

Timeline

Published
Sep 8, 2026
Last modified
Sep 11, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-770937.1CvFWD contained an integer overflow affecting service availability. Software customers upgrade to resolved maintenance release. Update all CVE-2026-770947.1CvFWD contained an out-of-bounds write affecting service availability. Software customers upgrade to resolved maintenance release. SoftwareCVE-2026-770957.1CvFWD contained a null pointer dereference affecting service availability. Software customers upgrade to resolved maintenance release. UpdaCVE-2026-770967.7CVFS contained a missing authentication condition affecting command execution. Software customers upgrade to resolved maintenance release. CVE-2026-770978.2Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. SoftwarCVE-2026-770989.8Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenancCVE-2026-770999.3CVFS contained an input validation issue affecting command execution. Software customers upgrade to resolved maintenance release. Update CVCVE-2026-77107.3A security flaw has been discovered in YunaiV yudao-cloud up to 3.8.0. This affects the function doFilterInternal of the file JwtAuthenticatCVE-2026-771008.7MediaAgent contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance CVE-2026-771017.5CommServe contained a stack-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance rCVE-2026-771027.5CommServe contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance reCVE-2026-771037.5CommServe contained an authentication bypass issue affecting access authorization and information disclosure. Software customers upgrade to
CVE-2026-77092: Critical severity, CVSS 9.8 | Vulnix