CVE-2026-12964: SSRF
Published Nov 10, 2026
·Updated
A vulnerability allowing for privileged escalation of the viewer account to gain administrator privileges.
Event History
Nov 10, 2026
CVE Published
via MITRE·05:43 AM
Data Sourced
via MITRE·05:43 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What access does an attacker need before attempting exploitation?
The attacker needs access from an adjacent network and low-level privileges, specifically a viewer account. No user interaction is required.
2
Which environments are most exposed?
Environments in which viewer accounts are available to users who can reach the affected system from an adjacent network are exposed to this escalation path.
3
What is the likely impact if exploitation succeeds?
A successful attacker can obtain administrator privileges. The reported impact includes high confidentiality, integrity, and availability impact.