ZDI-CAN-27466 HIGH 7.8 Upcoming Feb 05, 2026

verl

A high-severity vulnerability (CVSS 7.8) has been discovered in Verl, affecting the confidentiality, integrity, and availability of systems. The flaw requires local access and user interaction to exploit, but does not require authentication, making it a significant risk for multi-user or compromised systems. Security teams should monitor for exploitation attempts targeting local privilege escalation scenarios and prepare patching strategies ahead of the June 5, 2026 vendor deadline.

Advisory Details
Researcher Xingyu Wang
Reported February 05, 2026
Deadline June 05, 2026 50d
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy