Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An issue that allowed administrators to create and update users outside of their authorized organization scope has been resolved. This is an instance of CWE-863: Incorrect Authorization, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N (5.8 Medium). This issue was fixed in version 4.0.260203.0 of the runZero Platform.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-5378 An issue that allowed administrators to create and update users outside of their authorized organization scope has been resolved. This is an instance of CWE-863: Incorr… https://www.cve.org/CVERecord?id=CVE-2026-5378
Post summary
The CVE concerns a user scope escalation vulnerability that has been resolved, yet no PoC, exploit, or patch details are supplied.
🚨*CVE* CVE-2026-5378 An issue that allowed administrators to create and update users outside of their authorized organization scope has been resolved. This is an instance of CWE-863: Incorr… https://www.cve.org/CVERecord?id=CVE-2026-5378 ----- Traducción: CVE-2026-5378 Se … http://infoflow.cloud`
Post summary
CVE‑2026‑5378, a privilege escalation flaw allowing unauthorized user creation and updates, has been resolved; no PoC, exploit, or patch details are present.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | runzero | runzero_platform | - | - | - |