CVE-2026-40851

8.4 HIGH

A local attacker can perform a confusion attack on the cfgparser via a specially crafted file on an USB stick leading to code execution

Published: 2026-05-27 · Last updated: 2026-05-27

Severity and scoring

CVSS: 8.4 HIGH
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE: CWE-1287

Description

A local attacker can perform a confusion attack on the cfgparser via a specially crafted file on an USB stick leading to code execution. This can result in a total loss of confidentiality, integrity and availability.

Source: NVD

References

Related CVEs

Same CWE

CVE-2026-10825 — A denial-of-service vulnerability exists in the WebSocket API due to insufficient validation and handling of JSON-based requests
CVE-2026-9753 — The $_internalApplyOplogUpdate aggregation pipeline stage can be used to execute a document diff containing a malformed binary diff to re... (8.1 HIGH)
CVE-2026-9742 — When OIDC authentication is enabled in configuration, clients may set specific values in the "mechanism" parameter of the "authenticate" ... (7.5 HIGH)
CVE-2026-11460 — A flaw has been found in Boost Serialization up to 1.91 (7.3 HIGH)
CVE-2024-6858 — In Arista’s EOS when in 802.1X mode, multi-auth unauthenticated hosts might be allowed access to a switch port if there exists an EAPOL c... (6.5 MEDIUM)