CVE-2026-60035: Command injection in network auth
Published Nov 10, 2026
·Updated
A high privileged remote attacker can perform a code injection in the backends network auth function leading to code execution. This can result in a total loss of confidentiality, integrity and availability.
Event History
Nov 10, 2026
CVE Published
via MITRE·08:35 AM
Data Sourced
via MITRE·08:35 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The attacker must be remote and already have high privileges. No user interaction is required, and the attack complexity is low.
2
What is the potential impact of successful exploitation?
Successful exploitation can lead to code execution through the backend network authentication function. This can result in total loss of confidentiality, integrity, and availability.