PULSEUnderground Intel

EN VIVO37señales / 24h

FEED

ransomgenesis reclama a Acclaim Companies / JCJ Investment · US · Financial Servicesransomgenesis reclama a Gilliam & Associates, P.C · US · Professional Servicesransomgenesis reclama a Facts N Figures · US · Professional Servicesransomgenesis reclama a Illinois Work Injury Resource Center (IWIRC) · US · Healthcareransomgenesis reclama a Psychometrics Canada · CA · Professional Servicesransomgenesis reclama a Louisiana Crane & Construction · US · Manufacturingransomgenesis reclama a Aliqout Association · USransomgenesis reclama a EAS Engineering · US · Manufacturingransomgenesis reclama a Fred H Beck & Associates · US · Professional Servicesransomwhitearmor reclama a KTU Shipyard · PH · Transportationransomsilentransomgroup reclama a Moritt Hock & Hamroff LLP · US · Professional Servicesransomsilentransomgroup reclama a P...ransomqilin reclama a TRAUCO AG · DE · Manufacturingransomqilin reclama a Honghwa International · TW · Manufacturingransomgenesis reclama a Acclaim Companies / JCJ Investment · US · Financial Servicesransomgenesis reclama a Gilliam & Associates, P.C · US · Professional Servicesransomgenesis reclama a Facts N Figures · US · Professional Servicesransomgenesis reclama a Illinois Work Injury Resource Center (IWIRC) · US · Healthcareransomgenesis reclama a Psychometrics Canada · CA · Professional Servicesransomgenesis reclama a Louisiana Crane & Construction · US · Manufacturingransomgenesis reclama a Aliqout Association · USransomgenesis reclama a EAS Engineering · US · Manufacturingransomgenesis reclama a Fred H Beck & Associates · US · Professional Servicesransomwhitearmor reclama a KTU Shipyard · PH · Transportationransomsilentransomgroup reclama a Moritt Hock & Hamroff LLP · US · Professional Servicesransomsilentransomgroup reclama a P...ransomqilin reclama a TRAUCO AG · DE · Manufacturingransomqilin reclama a Honghwa International · TW · Manufacturing

← Todos los CVEs

CVE Watch4 sept 2026

CVE-2026-78604

Incorrect Permission Assignment for Critical Resource (CWE-732) in Elastic Agent can lead to local privilege escalation via Replace Binaries

CVSS

7.8

Alto

EPSS

0.1%

p4

KEV

—

Exploit Today

1

0-100

Publicado: 2 sept 2026 · Última mod.: 4 sept 2026 · CWE-732

EPSS · 30d

0.1%EPSS · 30 días0.1%

2026-10-022026-10-29

Descripción técnica

Incorrect Permission Assignment for Critical Resource (CWE-732) in Elastic Agent can lead to local privilege escalation via Replace Binaries (CAPEC-642). On Windows systems where Elastic Agent is installed in unprivileged mode, resources used by the agent service are created with access controls broader than required. A local user could take advantage of this to cause the service to execute code of their choosing, ultimately obtaining SYSTEM-level privileges on the host.

Referencias oficiales

discuss.elastic.cohttps://discuss.elastic.co/t/elastic-agent-8-19-21-9-4-6-9-5-2-security-update-esa-2026-150/390109

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-1114995.5 MED

———Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass.10h CVE-2026-118574—

——0Incorrect Permission Assignment for Critical Resource vulnerability in Drupal S3 File System allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects S3 File System versions: from 0.0.0 to 3.12.0.8h CVE-2026-1070609.1 CRÍ

——0Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to another user's VPN configurations and preferences.8h CVE-2026-1070557.5 ALT

——0Insecure permissions in the autosave component of AppML neutriNote CE versionCode 1387 allows unauthorized attackers to write arbitrary files.7h CVE-2026-1070477.5 ALT

——0Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers to arbitrarily manipulate the app's logging mechanism and log data.7h CVE-2026-1070447.5 ALT

——0Insecure permissions in ProjectMAXS MAXS Main v0.5.19 (versionCode 19) allows unauthorized attackers to arbitrarily manipulate the app's MAXS command/transport mechanism.7h