Skip to content
OpenAdvisories
Medium · 5.9 CVE-2026-43510 EUVD-2026-28434

CISA manage.get.gov insecure portfolio administrative privileges

Published May 7, 2026 · Updated Jun 25, 2026 · Assigned by cisa-cg

Vendor: CISA Product: manage.get.gov

Description

manage.get.gov is the .gov TLD registrar maintained by CISA. manage.get.gov allows an organization administrator to assign domain manager privileges for domains not already in another organization. Fixed in 1.176.0 on or around 2026-04-30.

Affected products

VendorProductAffectedFixed
CISA manage.get.gov 1.92.0 – < 1.176.0 1.176.0

Advisories 1

References

  • url patch
  • url release-notes
  • url vendor-advisory
  • url vdb-entry
  • url government-resource third-party-advisory
  • url issue-tracking
  • url