CVE-2026-12059
Cellopoint｜CelloOS - Improper Access Control
Vexday Risk Score
21Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 8.7EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
12 jun 2026Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
The SSH service of CelloOS developed by Cellopoint has an Improper Access Control vulnerability, allowing authenticated remote attackers to bypass the enforced command restrictions and execute operating system commands outside the originally authorized scope.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
Cellopoint · CelloOS¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →