{"id":"CVE-2026-7778","aliases":["EUVD-2026-27331","GHSA-v9q7-47h2-cg7c"],"status":"published","title":"runZero Platform dashboard configuration exposure","description":"An issue that could allow a dashboard configuration to be viewed from outside of the authorized organization scope has been resolved. This is an instance of CWE-269: Improper Privilege Management, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N (5.0, Medium). This issue was fixed in version v4.0.260416.0 of the runZero Platform.","severity":{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00168,"percentile":0.0621,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-269"],"published":"2026-05-05T13:44:38Z","modified":"2026-10-26T19:10:00Z","products":[{"vendor":"runzero","product":"platform"}],"references":[{"url":"https://www.runzero.com/advisories/runzero-platform-dashboard-configuration-exposure-cve-2026-7778/","tags":["vendor-advisory"]},{"url":"https://help.runzero.com/docs/release-notes/#402604160","tags":["release-notes"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-7778"},{"url":"https://www.runzero.com/advisories/runzero-platform-dashboard-configuration-exposure-cve-2026-7778"},{"url":"https://github.com/advisories/GHSA-v9q7-47h2-cg7c"}],"sources":{"cve":[{"id":"CVE-2026-7778","title":"runZero Platform dashboard configuration exposure","description":"An issue that could allow a dashboard configuration to be viewed from outside of the authorized organization scope has been resolved. This is an instance of CWE-269: Improper Privilege Management, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N (5.0, Medium). This issue was fixed in version v4.0.260416.0 of the runZero Platform.","status":"published","published":"2026-05-05T13:44:38.938Z","modified":"2026-05-05T14:41:52.389Z","cvss":[{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:20:05.830416Z"}],"euvd":[{"id":"EUVD-2026-27331","description":"An issue that could allow a dashboard configuration to be viewed from outside of the authorized organization scope has been resolved. This is an instance of CWE-269: Improper Privilege Management, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N (5.0, Medium). This issue was fixed in version v4.0.260416.0 of the runZero Platform.","status":"published","published":"2026-05-05T13:44:38Z","modified":"2026-05-05T14:41:52Z","cvss":[{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T19:05:17.068199Z"}],"ghsa":[{"id":"GHSA-v9q7-47h2-cg7c","title":"An issue that could allow a dashboard configuration to be viewed from outside of the authorized...","description":"An issue that could allow a dashboard configuration to be viewed from outside of the authorized organization scope has been resolved. This is an instance of CWE-269: Improper Privilege Management, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N (5.0, Medium). This issue was fixed in version v4.0.260416.0 of the runZero Platform.","status":"published","published":"2026-05-05T15:31:36Z","modified":"2026-05-05T15:31:40Z","cvss":[{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T15:07:54.707151Z"}],"nvd":[{"id":"CVE-2026-7778","description":"An issue that could allow a dashboard configuration to be viewed from outside of the authorized organization scope has been resolved. This is an instance of CWE-269: Improper Privilege Management, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N (5.0, Medium). This issue was fixed in version v4.0.260416.0 of the runZero Platform.","status":"published","published":"2026-05-05T14:16:09.473Z","modified":"2026-10-26T19:10:00.163Z","cvss":[{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:12:17.022502Z"}]}}