What’s Vulnerable › Vulnerabilities

CVE-2026-23648: Glory RBG-100 Recycler System Local Privilege Escalation via Insecure File Permissions

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-02-17 · updated 2026-06-17
• Weakness: CWE-732

Description

Glory RBG-100 recycler systems using the ISPK-08 software component contain multiple system binaries with overly permissive file permissions. Several binaries executed by the root user are writable and executable by unprivileged local users. An attacker with local access can replace or modify these binaries to execute arbitrary commands with root privileges, enabling local privilege escalation.

Affected products

• Glory Global Solutions RBG-100: 0

References

• https://www.glory-global.com/
• https://www.vulncheck.com/advisories/glory-rbg-100-recycler-system-local-privilege-escalation-via-insecure-file-permissions

Get alerted when CVE-2026-23648 or the next vulnerability affects your stack