CVE-2026-43510

תיאור (מקור, אנגלית)

manage.get.gov is the .gov TLD registrar maintained by CISA. manage.get.gov allows an organization administrator to assign domain manager privileges for domains not already in another organization. Fixed in 1.176.0 on or around 2026-04-30.

מדדים

CVSS 3.1

5.9 (MEDIUM) מקור הציון: CNA CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H

CVSS 4.0

5.1 (MEDIUM) מקור הציון: CNA CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — סבירות ניצול

0% (אחוזון 000) נכון ל-1/8/2026

CWE

CWE-266

קישורים

• https://github.com/cisagov/manage.get.gov/issues/4858
• https://github.com/cisagov/manage.get.gov/pull/4900
• https://github.com/cisagov/manage.get.gov/releases/tag/v1.176.0
• https://github.com/cisagov/manage.get.gov/security/advisories/GHSA-6wrg-x3j6-x‮…
• https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/202‮…
• https://www.cve.org/CVERecord?id=CVE-2026-43510
• https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC‮…