IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2025-11-28 15:16

MODIFIED

2025-11-28 15:16

EPSS (Prob. Exploit)

0.41%

Top 65.9%

DATA SOURCES:

NVD 🔗 2025-11-28 CVE PROJECT 🔗 2026-01-19 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-10-25 OSV 🔗 2026-09-13

> DESCRIPTION

Improper Privilege Management vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: from v2.9.0 through v2.13.0. Users are recommended to upgrade to version 2.14.0, which fixes the issue.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-269

> CWE DETAILED DESCRIPTIONS

CWE-269: Improper Privilege Management - The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

Apache Kvrocks: RESET command grants admin privileges

AFFECTED PACKAGES:

Unknown / Unknown

> HISTORIQUE DES MODIFICATIONS

Première apparition

28/11/2025 15:16

Source: NVD

📊 ENRICHISSEMENT 19/01/2026 17:37

CVEPROJECT

Champ modifié: CVE Project

Ancienne valeur:

Non

Nouvelle valeur:

Oui

📊 ENRICHISSEMENT 01/12/2025 06:01

CWE

Champ modifié: Description CWE