CVE-2026-60036: Command injection in patch activate
Published Nov 10, 2026
·Updated
A high privileged remote attacker can perform a code injection in the backends patch activate function leading to code execution. This can result in a total loss of confidentiality, integrity and availability.
Event History
Nov 10, 2026
CVE Published
via MITRE·08:35 AM
Data Sourced
via MITRE·08:35 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The attacker must be remote and already hold high privileges. No user interaction is required, and the attack complexity is low.
2
What is the likely impact if exploitation succeeds?
Successful exploitation can lead to code execution through the backend patch activation function. The stated impact is total loss of confidentiality, integrity, and availability.