ZDI-26-177
HIGH 7.8
Published
Mar 10, 2026
Array Networks MotionPro ArrayInstallManager Incorrect Permission Assignment Local Privilege Escalation Vulnerability
Array
A privilege escalation vulnerability (CVE-2026-26364) in Array Networks MotionPro allows attackers with low-level code execution to gain elevated system privileges. An attacker who already has access to run code on the system can exploit this flaw to gain administrative control, rated as HIGH severity with a CVSS score of 7.8. Security teams should prioritize patching Array Networks MotionPro systems and restrict code execution capabilities to trusted processes to limit exposure to this vulnerability.