Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An issue that could expose task information outside of the authorized organization scope has been resolved. This is an instance of CWE-863: Incorrect Authorization, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N (2.2 Low). This issue was fixed in version 4.0.260205.0 of the runZero Platform.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-5381 Incorrect Authorization Vulnerability in runZero Platform Before 4.0.260205.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-5381
Post summary
The post announces CVE‑2026‑5381, an incorrect‑authorization vulnerability affecting runZero Platform versions before 4.0.260205.0, and points to a vulnerability details page.
🚨*CVE* CVE-2026-5381 An issue that could expose task information outside of the authorized organization scope has been resolved. This is an instance of CWE-863: Incorrect Authorization, and… https://www.cve.org/CVERecord?id=CVE-2026-5381 ----- Traducción: CVE-2026-5381 Se … http://infoflow.cloud`
Post summary
The post announces that CVE‑2026‑5381, an Incorrect Authorization flaw allowing task data exposure, has been resolved, providing a brief technical outline but no exploitation or patch details.
CVE-2026-5381 An issue that could expose task information outside of the authorized organization scope has been resolved. This is an instance of CWE-863: Incorrect Authorization, and… https://www.cve.org/CVERecord?id=CVE-2026-5381
Post summary
The post announces that CVE‑2026‑5381, an incorrect authorization flaw exposing task data, has been resolved, though it provides no patch or exploitation details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | runzero | runzero_platform | - | - | - |