Vulnerabilities

CVSS

6.5 Medium

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Risk score

52.0

Published

2026-07-16

Status

Awaiting Analysis

SALTO ProAccess Space software using the tenancy feature / logical partition is vulnerable to a privilege escalation attack that could allow an authorized attacker to access any space managed by the affected product.

Weaknesses

CWE-639

Coverage 1

vulnerability

SALTO ProAccess Space

A critical vulnerability (CVE-2026-11889) exists in SALTO ProAccess Space versions prior to 6.13, allowing an authenticated attacker to escalate privileges and gain unauthorized access to spaces beyond their assigned par…

CISA Advisories · Jul 16, 2026 Critical

CVE-2026-11889WOvulnerabilityprivilege escalationcve-2026-11889

All articles mentioning it

Advisories and references

• github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-2...
• cisa.gov/news-events/ics-advisories/icsa-26-197-07