Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Anchore Enterprise versions from 5.11.0 to 5.27.1 and 6.0.0 contain an improper privilege escalation vulnerability in the user management API. An authenticated attacker who is able to access the Anchore Enterprise API could issue an API call capable of modifying user permissions to gain access to additional resources and operations. It is not possible to grant the system-admin role, but a read only user could be granted write access. This issue is fixed in Anchore Enterprise 5.27.2 and 6.0.1.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-63727 Privilege Escalation in Anchore Enterprise User Management API Versions 5.11.0-5.27.1 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-63727
Post summary
The text announces a privilege escalation vulnerability (CVE-2026-63727) affecting Anchore Enterprise User Management API versions 5.11.0-5.27.1, but provides no evidence of exploitation, reuse, patches, or PoC.