PULSE
LIVE30signals / 24h
ES
FEED
ransomqilin reclama a RehaVital Gesundheitsservice GmbH · DE · Healthcareransomnova reclama a Tèrra Aventura · PT · Hospitality and Tourismransomnova reclama a Koperasi Karyawan PT Aplikanusa Lintasarta · ID · Telecommunicationransomakira reclama a Novasport s.r.o. · CZ · Consumer Servicesransomakira reclama a Finer & Finer · Consumer Servicesransommorpheus reclama a Kyowa Singapore Pte Ltd · SG · Business Servicesransomtitan reclama a PERTINENT HEALTHCARE BUSINESS SOLUTIONS PRIVATE LIMITED · IN · Healthcareransomworldleaks reclama a St. Francis Xavier Catholic School System · US · Educationransomworldleaks reclama a PinnPACK · US · Manufacturingransomspacebears reclama a DoAllTech · KR · Technologyransomspacebears reclama a Anpra SAS · CO · Business Servicesransomspacebears reclama a BiesSse Group · IT · Business Servicesransomqilin reclama a Postres Reina · ES · Agriculture and Food ProductionvulnKEV agrega CVE-2026-60137 — WordPress / Coreransomqilin reclama a RehaVital Gesundheitsservice GmbH · DE · Healthcareransomnova reclama a Tèrra Aventura · PT · Hospitality and Tourismransomnova reclama a Koperasi Karyawan PT Aplikanusa Lintasarta · ID · Telecommunicationransomakira reclama a Novasport s.r.o. · CZ · Consumer Servicesransomakira reclama a Finer & Finer · Consumer Servicesransommorpheus reclama a Kyowa Singapore Pte Ltd · SG · Business Servicesransomtitan reclama a PERTINENT HEALTHCARE BUSINESS SOLUTIONS PRIVATE LIMITED · IN · Healthcareransomworldleaks reclama a St. Francis Xavier Catholic School System · US · Educationransomworldleaks reclama a PinnPACK · US · Manufacturingransomspacebears reclama a DoAllTech · KR · Technologyransomspacebears reclama a Anpra SAS · CO · Business Servicesransomspacebears reclama a BiesSse Group · IT · Business Servicesransomqilin reclama a Postres Reina · ES · Agriculture and Food ProductionvulnKEV agrega CVE-2026-60137 — WordPress / Core
← All CVEs
CVE WatchJul 19, 2026

CVE-2026-15379

The Altiris WMI provider exposes a class (AltirisAgent_Stream) that allows any local standard user to read the contents of any file accessib

CVSS

—

No CVSS

EPSS

0.1%

p2

KEV

—

Exploit Today

0

0-100

Published: Jul 17, 2026 · Last modified: Jul 19, 2026

EPSS · 30d
0.1%EPSS · 30 days0.1%
2026-07-172026-07-21
Technical description

The Altiris WMI provider exposes a class (AltirisAgent_Stream) that allows any local standard user to read the contents of any file accessible to the SYSTEM account, bypassing filesystem ACLs. No admin privileges required. The provider reverts to the LocalSystem context when servicing WMI queries without re-impersonating the caller. Any local standard user can therefore read SYSTEM-readable files — including configuration files, service logs, and secrets stored with SYSTEM/Administrator-only ACLs — by querying the provider directly.

Official references
Related CVEs

No related CVEs by CWE or product.