8.6Hoch
CVE-2026-2123Privilege escalation vulnerability in Operations Agent
Beschreibung
A security audit identified a privilege escalation vulnerability in Operations Agent(<=OA 12.29) on Windows. Under specific conditions Operations Agent may run executables from specific writeable locations.Thanks to Manuel Rickli & Philippe Leiser of Oneconsult AG for reporting this vulnerability
Schwachstellentyp (CWE):
CWE-280
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| microfocus | operations agent | 12.22 – ≤ 12.29 | |
| OpenText | Operations Agent | OA 12.22 – ≤ OA 12.29 |
Referenzen und Patches
- https://portal.microfocus.com/s/article/KM000046068 customer-entitlementVendor Advisory
CPE-Treffer (NVD) (1)
cpe:2.3:a:microfocus:operations_agent:*:*:*:*:*:*:*:*≥ 12.22 ≤ 12.29