CVE-2026-107424

{
  "etk_id": "ETK-2026-1572",
  "cve_id": "CVE-2026-107424",
  "display_id": "CVE-2026-107424",
  "ghsa_id": "GHSA-grrc-h2jw-4w99",
  "euvd_id": "EUVD-2026-101013",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Improper privilege assignment in frontend-dashboard",
  "summary": "frontend-dashboard versions through 3.0.7 are affected by an improper privilege-assignment flaw. An attacker may gain elevated privileges; no deployment-specific precondition is documented, and the supplied assessment indicates no prior privileges are required.",
  "mitigation": "Restrict untrusted network access to the dashboard and limit accounts that can reach it while remediation is pending. Monitor for an upstream fixed release and upgrade promptly when one is published.",
  "vendor": "M A Vinoth Kumar",
  "product": "Frontend Dashboard",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, <= 3.0.7"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "frontend-dashboard",
      "purl": null
    }
  ],
  "cwes": [
    266
  ],
  "cvss_score": 9.8,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "epss_score": 0.0039,
  "epss_percentile": 0.3182,
  "epss_asof": "2026-10-20",
  "automation": "deterministic",
  "check": true,
  "check_confidence_basis": "differential",
  "exploit": false,
  "pipeline_minutes": 34.39276655,
  "t0_at": "2026-10-14T12:08:27.612000+00:00",
  "signals": {
    "check": {
      "at": "2026-10-14T16:51:12.980997+00:00",
      "days": 0.19635843746527779,
      "is_lower_bound": false,
      "measured_at": "2026-10-14T12:08:27.612000+00:00",
      "url": null
    },
    "trigger_signal": {
      "at": "2026-10-14T12:08:27.612000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-14T12:08:27.612000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107424"
    }
  }
}