CVE-2026-20448: Medium severity geniezone vulnerability
In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10708513; Issue ID: MSV-6281.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-20448?
CVE-2026-20448 has a moderate severity level due to the potential for privilege escalation.
How do I fix CVE-2026-20448?
To fix CVE-2026-20448, apply the patch identified by ALPS10708513 to the affected geniezone software.
What is the impact of CVE-2026-20448?
The impact of CVE-2026-20448 is that it allows a malicious actor with System privileges to escalate privileges locally, potentially compromising system integrity.
Is user interaction required to exploit CVE-2026-20448?
No, user interaction is not needed to exploit CVE-2026-20448.
What caused the vulnerability in CVE-2026-20448?
CVE-2026-20448 was caused by a missing permission check within the geniezone software.