Skip to content
OpenAdvisories
Medium · 4.8 CVE-2026-0873 EUVD-2026-5513GHSA-cx4q-rcwp-3qpw

Privilege Elevation in Ercom Cryptobox administration console

Published Feb 4, 2026 · Updated Feb 4, 2026 · Assigned by THA-PSIRT

Description

On a Cryptobox platform where administrator segregation based on entities is used, some vulnerabilities in Ercom Cryptobox administration console allows an authenticated entity administrator with knowledge to elevate his account to global administrator.

Affected products

VendorProductAffectedFixed
Ercom Cryptobox — v4.40.x

References