Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8cmg-xf32-xmvr

Опубликовано: 24 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

A type confusion vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to execute arbitrary native code as privileged account.

This issue requires administrative privileges to abuse. On Windows deployments, the risk is scored as a medium because services frequently run under less-privileged service accounts by default.

A type confusion vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to execute arbitrary native code as privileged account.

This issue requires administrative privileges to abuse. On Windows deployments, the risk is scored as a medium because services frequently run under less-privileged service accounts by default.

EPSS

Процентиль: 26%
0.00092
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-704

Связанные уязвимости

CVSS3: 9.1
nvd
4 месяца назад

A type confusion vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to execute arbitrary native code as privileged account. This issue requires administrative privileges to abuse. On Windows deployments, the risk is scored as a medium because services frequently run under less-privileged service accounts by default.

EPSS

Процентиль: 26%
0.00092
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-704