CVE-2026-49311
Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availabil
CVSS
6.2
Medium
EPSS
0.1%
p3
KEV
—
Exploit Today
1
0-100
Published: Sep 9, 2026 · Last modified: Sep 9, 2026 · CWE-275
0.1%EPSS · 30 days0.1%
2026-09-282026-10-25
Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availability.
- consumer.huawei.comhttps://consumer.huawei.com/en/support/bulletin/2026/9/
- consumer.huawei.comhttps://consumer.huawei.com/en/support/bulletinlaptops/2026/9/
- consumer.huawei.comhttps://consumer.huawei.com/en/support/bulletinvision/2026/9/
- consumer.huawei.comhttps://consumer.huawei.com/en/support/bulletinwearables/2026/9/
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-1051656.3 MED11.0%
——3A vulnerability has been found in devopspolis secrets-replicator up to 0.4.0. Impacted is the function process_single_secret of the file src/handler.py of the component AssumeRole Handler. Such manipulation of the argument external_id leads to incorrect permission assignment. The attack can be executed remotely. Upgrading to version 0.5.0 is recommended to address this issue. The name of the patch is b42239405fbf4fae3c3f0048fc0b4225112edceb. It is suggested to upgrade the affected component.21dCVE-2026-759786.3 MED30.2%
——9A security vulnerability has been detected in xianrendzw EasyReport up to 2.0.17.0522_Beta. The affected element is the function DataSourceController.add of the file DataSourceController.java of the component QueryerFactory. Such manipulation of the argument queryerClass leads to permission issues. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.5dCVE-2026-193767.3 HIG40.6%
——12A vulnerability has been found in Uasoft Badaso 3.0.0-alpha. This vulnerability affects the function ApiRequest::class of the file src/Routes/api.php of the component File API. The manipulation leads to permission issues. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.4dCVE-2026-191917.8 HIG5.1%
——2A security vulnerability has been detected in StableBit DrivePool 2.3.13.1687. This vulnerability affects unknown code of the file C:\Program Files\StableBit\DrivePool\DrivePool.Service.exe of the component DrivePoolService. Such manipulation leads to permission issues. The attack must be carried out locally. The exploit has been disclosed publicly and may be used.3dCVE-2026-191907.8 HIG5.1%
——2A weakness has been identified in StableBit Scanner 2.6.13.4088. This affects an unknown part of the file C:\Program Files (x86)\StableBit\Scanner\Service\Scanner.Service.exe of the component ScannerService. This manipulation causes permission issues. The attack is restricted to local execution. The exploit has been made available to the public and could be used for attacks.3dCVE-2026-122015.3 MED1.0%
——0A flaw has been found in IObit Malware Fighter up to 13.2.0. Affected by this vulnerability is an unknown functionality of the component DLL Handler. This manipulation causes permission issues. The attack requires local access. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.95d