HIGHCVSS v3.1 7.1Vulnerability
CVE-2026-111000
A user with the Editor role who can edit a folder can move it, through the folders resource API, under a folder they administer, and so gain Admin on the moved folder and its contents, including the right to change their permissions. The legacy folder move API refuses the same move (improper privilege management).
Properties
- Severity
- HIGH
- Nvd fetched at
- 2026-11-11T23:49:45.533241+00:00
- Cvss severity
- HIGH
- Cvss score
- 7.1
- Retrieved at
- 2026-11-11T23:50:18+00:00
- Score
- 7.1
- Cvss version
- 3.1
- Last source
- NVD
- Cve id
- CVE-2026-111000
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
- First seen by Signal
- 2026-11-11T15:41:39+00:00
- Name
- CVE-2026-111000
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
- Published at
- 2026-11-11T15:17:14.503
- Last modified
- 2026-11-11T15:17:14.503
Related Entities (2)
HAS_WEAKNESS (2)
Related research
Explore deeper with Ninja Signal's threat intelligence graph