CVE-2026-20987 HIGH

CVE-2026-20987

Published February 4, 2026
Last update February 4, 2026
View on NVD All CVEs

CVSS base score

8.7/10
Attack vector Local
Attack complexity Low
Privileges required High
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

What the vulnerability does

01Description

Improper input validation in GalaxyDiagnostics prior to version 3.5.050 allows local privileged attackers to execute privileged commands.

Key dates

02Disclosure timeline

February 4, 2026 CVE published
February 4, 2026 Record updated