{"id":"CVE-2026-0873","aliases":["EUVD-2026-5513","GHSA-cx4q-rcwp-3qpw"],"status":"published","title":"Privilege Elevation in Ercom Cryptobox administration console","description":"On a Cryptobox platform where administrator segregation based on entities is used, some vulnerabilities in Ercom Cryptobox administration console allows an authenticated entity administrator with knowledge to elevate his account to global administrator.","severity":{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:U","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00282,"percentile":0.20895,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-1220","CWE-79"],"published":"2026-02-04T10:42:14Z","modified":"2026-06-17T10:11:32Z","products":[{"vendor":"ercom","product":"cryptobox"}],"references":[{"url":"https://info.cryptobox.com/doc/v4.40/4.40.en/"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0873"},{"url":"https://info.cryptobox.com/doc/v4.40/4.40.en"},{"url":"https://github.com/advisories/GHSA-cx4q-rcwp-3qpw"}],"sources":{"cve":[{"id":"CVE-2026-0873","title":"Privilege Elevation in Ercom Cryptobox administration console","description":"On a Cryptobox platform where administrator segregation based on entities is used, some vulnerabilities in Ercom Cryptobox administration console allows an authenticated entity administrator with knowledge to elevate his account to global administrator.","status":"published","published":"2026-02-04T10:42:14.626Z","modified":"2026-02-04T14:56:23.511Z","cvss":[{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:U","level":"medium","assessor":"cna"}],"cwes":["CWE-79","CWE-1220"],"updated_at":"2026-11-02T14:20:13.587351Z"}],"euvd":[{"id":"EUVD-2026-5513","description":"On a Cryptobox platform where administrator segregation based on entities is used, some vulnerabilities in Ercom Cryptobox administration console allows an authenticated entity administrator with knowledge to elevate his account to global administrator.","status":"published","published":"2026-02-04T10:42:14Z","modified":"2026-02-04T14:56:23Z","cvss":[{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:U","level":"medium"}],"updated_at":"2026-11-02T19:48:44.612436Z"}],"ghsa":[{"id":"GHSA-cx4q-rcwp-3qpw","title":"On a Cryptobox platform where administrator segregation based on entities is used, some...","description":"On a Cryptobox platform where administrator segregation based on entities is used, some vulnerabilities in Ercom Cryptobox administration console allows an authenticated entity administrator with knowledge to elevate his account to global administrator.","status":"published","published":"2026-02-04T12:31:25Z","modified":"2026-02-04T12:31:32Z","cvss":[{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T15:06:02.555847Z"}],"nvd":[{"id":"CVE-2026-0873","description":"On a Cryptobox platform where administrator segregation based on entities is used, some vulnerabilities in Ercom Cryptobox administration console allows an authenticated entity administrator with knowledge to elevate his account to global administrator.","status":"published","published":"2026-02-04T11:16:02.797Z","modified":"2026-06-17T10:11:32.37Z","cvss":[{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"}],"cwes":["CWE-79","CWE-1220"],"updated_at":"2026-11-02T14:12:05.149641Z"}]}}