CVE-2026-9063: Medium severity vulnerability
Published Nov 10, 2026
·Updated
A locally authenticated user can achieve privilege escalation via an insecure configuration that leads to unauthorized code execution. This flaw can only be exploited after authenticating with an admin-privileged service account.
Event History
Nov 10, 2026
CVE Published
via MITRE·05:12 AM
Data Sourced
via MITRE·05:12 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who is realistically exposed to this issue?
Exposure is limited to environments where an attacker can authenticate locally using an admin-privileged service account. Unauthenticated and lower-privileged users are not described as able to exploit the flaw.
2
What access does an attacker need to exploit it?
The attacker needs local access, valid authentication, and credentials for an admin-privileged service account. No user interaction is required.
3
What is the potential impact after successful exploitation?
Successful exploitation can result in privilege escalation through unauthorized code execution, with high impact to confidentiality, integrity, and availability.