ZDI-CAN-27466
HIGH 7.8
Upcoming
Feb 05, 2026
verl
A high-severity vulnerability (CVSS 7.8) has been discovered in Verl, affecting the confidentiality, integrity, and availability of systems. The flaw requires local access and user interaction to exploit, but does not require authentication, making it a significant risk for multi-user or compromised systems. Security teams should monitor for exploitation attempts targeting local privilege escalation scenarios and prepare patching strategies ahead of the June 5, 2026 vendor deadline.
Advisory Details
Researcher
Xingyu Wang
Reported
February 05, 2026
Deadline
June 05, 2026
50d
CVSS Vector
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H