CVE-2025-22426
MEDIUMCVSS v3.1: 5.9 · EPSS: 0.0012 (30.8 percentile)
Source data as of:
At a glance
- Severity
- MEDIUM
- CVSS
- 5.9 v3.1 · NVD
- EPSS
- 0.0012 (30.8 percentile) · FIRST.org
- CISA KEV
- No
- Attack conditions (CVSS vector)
- No privilegesNo user interaction · Source: NVD Vector
- Affected vendors
- Published
- 2026-06-01 · Modified: 2026-06-02
- References
- Jump to references (1)
CVSS / EPSS / KEV
Source — CVSS: NVD · EPSS: FIRST.org · KEV: CISA. Data & Sources
Description
In many functions of ComputerEngine.java, there is a possible way to access URIs across users due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
References
Reference URLs as listed by NVD, grouped by a mechanical match on the link's host/pattern. Labels describe the link type only.