CVE-2026-7778

MEDIUM 5.0

runZero Platform dashboard configuration exposure

CVSS Score

5.0

EPSS Score

0.0%

EPSS Percentile

0th

An issue that could allow a dashboard configuration to be viewed from outside of the authorized organization scope has been resolved. This is an instance of CWE-269: Improper Privilege Management, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N (5.0, Medium). This issue was fixed in version v4.0.260416.0 of the runZero Platform.

CWE	CWE-269
Vendor	runzero
Product	platform
Published	May 5, 2026

Stay Ahead of the Next One

Get instant alerts for runzero platform

Be the first to know when new medium vulnerabilities affecting runzero platform are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

Low

Integrity

None

Availability

None

Affected Versions

runZero / Platform

0 < 4.0.260416.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

runzero.com: https://www.runzero.com/advisories/runzero-platform-dashboard-configuration-exposure-cve-2026-7778/ help.runzero.com: https://help.runzero.com/docs/release-notes/#402604160

Credits

runZero Tod Beardsley of runZero