What’s Vulnerable › Vulnerabilities

CVE-2026-0873: Privilege Elevation in Ercom Cryptobox administration console

• Severity: medium (CVSS 4.8 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-02-04 · updated 2026-06-17
• Weakness: CWE-79

Description

On a Cryptobox platform where administrator segregation based on entities is used, some vulnerabilities in Ercom Cryptobox administration console allows an authenticated entity administrator with knowledge to elevate his account to global administrator.

Affected products

• Ercom Cryptobox: all versions

References

• https://info.cryptobox.com/doc/v4.40/4.40.en/

Get alerted when CVE-2026-0873 or the next vulnerability affects your stack