CVE-2026-55979

Full vulnerability record from the local CVENow database.

Description

An improper access control check in CatchPulse's named pipe communication interface could allow an attacker to invoke CatchPulse functions. This is limited to operations that enforce more restrictive security policies.

Severity

MEDIUM

CVSS score

5.2 (v3.1)

Vulnerability status

Deferred

Source identifier

5f57b9bf-260d-4433-bf07-b6a79e9bb7d4

Published

2026-08-06 10:16:44.127000

Last modified

2026-10-24 16:10:00.153000

View original CVE JSON

{
  "id": "CVE-2026-55979",
  "sourceIdentifier": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4",
  "published": "2026-08-06T10:16:44.127",
  "lastModified": "2026-10-24T16:10:00.153",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An improper access control check in CatchPulse's named pipe communication interface could allow an attacker to invoke CatchPulse functions. This is limited to operations that enforce more restrictive security policies."
    },
    {
      "lang": "es",
      "value": "Una comprobación de control de acceso inadecuada en la interfaz de comunicación de tubería con nombre de CatchPulse podría permitir a un atacante invocar funciones de CatchPulse. Esto se limita a operaciones que aplican políticas de seguridad más restrictivas."
    }
  ],
  "affected": [
    {
      "source": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4",
      "affectedData": [
        {
          "vendor": "SecureAge",
          "product": "CatchPulse",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "10.10.0 and earlier",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L",
          "baseScore": 5.2,
          "baseSeverity": "MEDIUM",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "CHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "availabilityImpact": "LOW"
        },
        "exploitabilityScore": 2.0,
        "impactScore": 2.7
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-08-06T12:24:17.146593Z",
          "id": "CVE-2026-55979",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-284"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-098/",
      "source": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4"
    },
    {
      "url": "https://www.secureage.com/security-vulnerabilities#",
      "source": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4"
    }
  ]
}