CVE-2026-0873

On a Cryptobox platform where administrator segregation based on entities is used, some vulnerabilities in Ercom Cryptobox administration console allows an authenticated entity administrator with knowledge to elevate his account to global administrator.

Score

CVSS 4.0 4.8 Medium

Status

Deferred - psirt@thalesgroup.com

Published

2026-02-04

Last modified

2026-02-04

Weaknesses

CWE-1220, CWE-79

Affected products

• Cryptobox (Ercom)

References

• https://info.cryptobox.com/doc/v4.40/4.40.en/