CVE-2026-0873mediumCWE-1220CWE-79

CVE-2026-0873: medium-severity vulnerability in Ercom Cryptobox

Privilege Elevation in Ercom Cryptobox administration console

Published

Follow this CVE+ Monitor Cryptobox

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.8epss 0.3%
On a Cryptobox platform where administrator segregation based on entities is used, some vulnerabilities in Ercom Cryptobox administration console allows an authenticated entity administrator with knowledge to elevate his account to global administrator.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:U
Affected products
Ercom · Cryptobox
Related CVEs — Ercom Cryptobox

In the same product, most dangerous first.

CVE-2026-5794MEDIUMVulnerability in Cryptobox allows an authenticated user to trigger an account lockoutEPSS 0.3%CVE-2026-6805MEDIUMVulnerability on Cryptobox external sharing featureEPSS 0.2%CVE-2025-14266LOWCSRF in Ercom Cryptobox administration consoleEPSS 0.2%