CVE-2026-0873 — Privilege Elevation in Ercom Cryptobox administration console

CVE-2026-0873

Privilege Elevation in Ercom Cryptobox administration console PUBLISHED

Description (CNA)

On a Cryptobox platform where administrator segregation based on entities is used, some vulnerabilities in Ercom Cryptobox administration console allows an authenticated entity administrator with knowledge to elevate his account to global administrator.

Affected (CNA)

Vendor / product	Versions
Ercom / Cryptobox	unaffected v4.40.x

CWE

CWE-79, CWE-1220

References

https://info.cryptobox.com/doc/v4.40/4.40.en/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.