CVE-2026-6181

—

CVSS 3.1

5.9 medium

EPSS

<1%p22

Published

Aug 11, 2026 (Aug 11, 2026)

Modified

Sep 3, 2026

Description

The Device Configuration Framework is vulnerable to an authentication bypass flaw. This flaw can only be exploited after authenticating with a viewer-privileged service account.

Weakness: CWE-290
Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.