CVE-2026-20991
4 documents4 sources
Severity
6.7MEDIUM
EPSS
0.0%
top 96.21%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 16
Description
Improper privilege management in ThemeManager prior to SMR Mar-2026 Release 1 allows local privileged attackers to reuse trial contents.
CVSS vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
Affected Packages1 packages
🔴Vulnerability Details
2GHSA▶
GHSA-vpvf-7jf8-3gpw: Improper privilege management in ThemeManager prior to SMR Mar-2026 Release 1 allows local privileged attackers to reuse trial contents↗2026-03-16
CVEList▶
CVE-2026-20991: Improper privilege management in ThemeManager prior to SMR Mar-2026 Release 1 allows local privileged attackers to reuse trial contents↗2026-03-16