{"id":"CVE-2026-95786","kind":"vulnerability","aliases":["CVE-2026-95786"],"related":[],"title":"Unnamed system interface may skip authorization checks, exposing protected data","description":"A vulnerability exists in a system interface that may, under certain conditions, fail to properly enforce authorization boundaries. Successful exploitation could allow an unauthorized party to access or modify protected system information, potentially affecting confidentiality and integrity.","summary":"A system interface may fail to enforce authorization boundaries under certain conditions. An unauthorized party could read or change protected system information.","severity":"medium","cvss":6.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["other"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T20:19:49+00:00","first_seen_at":"2026-11-10T20:46:17+00:00","triaged_at":"2026-11-10T20:48:04+00:00","updated_at":"2026-11-10T20:48:04+00:00","category":"other","confidence":0.3,"triage":{"at":"2026-11-10T20:48:04Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"Unnamed system interface may skip authorization checks, exposing protected data","impact":"medium","summary":"A system interface may fail to enforce authorization boundaries under certain conditions. An unauthorized party could read or change protected system information.","audience":"businesses","category":"other","nicknames":[],"who_cares":[],"confidence":0.3,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Unauthorized party reads or modifies protected system information","analyst_note":"Identify the affected product and versions from the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-95786; the description names no product.","how_to_check":"unknown","plain_action":"","product_name":"unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000628,"input_tokens":4530,"output_tokens":350,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-95786':13A,16A 'access':65C 'affect':72C 'allow':60C 'author':6A,24B,55C 'boundari':25B,56C 'certain':27B,49C 'chang':35B 'check':7A 'condit':28B,50C 'confidenti':73C 'could':32B,59C 'cve':11A,14A 'data':10A 'enforc':23B,54C 'exist':41C 'exploit':58C 'expos':8A 'fail':21B,51C 'inform':38B,70C 'integr':75C 'interfac':3A,19B,45C 'may':4A,20B,47C 'modifi':67C 'parti':31B,63C 'potenti':71C 'proper':53C 'protect':9A,36B,68C 'read':33B 'skip':5A 'success':57C 'system':2A,18B,37B,44C,69C 'unauthor':30B,62C 'unnam':1A 'vulner':40C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["medium","other"],"campaign_type":null,"search_a":"'-2026':12A,15A '-95786':13A,16A 'author':6A 'check':7A 'cve':11A,14A 'data':10A 'expos':8A 'interfac':3A 'may':4A 'protect':9A 'skip':5A 'system':2A 'unnam':1A","search_b":"'author':24B 'boundari':25B 'certain':27B 'chang':35B 'condit':28B 'could':32B 'enforc':23B 'fail':21B 'inform':38B 'interfac':19B 'may':20B 'parti':31B 'protect':36B 'read':33B 'system':18B,37B 'unauthor':30B","search_c":"'access':65C 'affect':72C 'allow':60C 'author':55C 'boundari':56C 'certain':49C 'condit':50C 'confidenti':73C 'could':59C 'enforc':54C 'exist':41C 'exploit':58C 'fail':51C 'inform':70C 'integr':75C 'interfac':45C 'may':47C 'modifi':67C 'parti':63C 'potenti':71C 'proper':53C 'protect':68C 'success':57C 'system':44C,69C 'unauthor':62C 'vulner':40C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T20:19:49+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss_by":"security-alert@hpe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-95786","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95786","severity":null,"published_at":"2026-11-10T20:19:49+00:00","modified_at":"2026-11-10T20:19:49+00:00","first_seen_at":"2026-11-10T20:46:17+00:00","fetched_at":"2026-11-10T20:46:17+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}