Vulnerability · Published Feb 4, 2026 · Assigned by THA-PSIRT
CVE-2026-0873Privilege Elevation in Ercom Cryptobox administration console
Medium 4.8
In plain English
A medium-severity cross-site scripting in Cryptobox from Ercom. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities).
Severity (CVSS 4.0)4.8Medium
Exploit odds (30 days)0.3%top 79.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
On a Cryptobox platform where administrator segregation based on entities is used, some vulnerabilities in Ercom Cryptobox administration console allows an authenticated entity administrator with knowledge to elevate his account to global administrator.
Affected products (as reported)
Weakness: CWE-79, CWE-1220 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:U