Vulnerability · Published Jul 17, 2026 · Assigned by TXOne

CVE-2026-41993

Medium 4.4

In plain English

A medium-severity improper access control in SafePortAgent from TXOne Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities).

Severity (CVSS 3.1)4.4Medium

Exploit odds (30 days)0.1%top 95.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Improper Access Control vulnerability in the Removable Media Validation function of TXOne Networks products allows a local attacker with administrator privileges to bypass the file lockdown mechanism, resulting in unauthorized file transfer to the victim device. The attacker needs to deploy unauthorized file on the removable media in advance. This issue affects SafePortAgent: before 3.2.5024; StellarProtect: from 3.2.4011 before 5.0.1083.

Affected products (as reported)

Vendor	Product	Versions
TXOne Networks	SafePortAgent	0 – before 3.2.5024
TXOne Networks	StellarProtect	3.2.4011 – before 5.0.1083

Weakness: CWE-284 · Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

References

https://www.txone.com/psirt/cve-2026-41993/ vendor-advisory