Vulnerability · Published Feb 17, 2026 · Assigned by VulnCheck

CVE-2026-23648Glory RBG-100 Recycler System Local Privilege Escalation via Insecure File Permissions

High 7.8

In plain English

A high-severity incorrect permission assignment in RBG-100 from Glory Global Solutions. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities).

Severity (CVSS 3.1)7.8High

Exploit odds (30 days)0.2%top 94.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Glory RBG-100 recycler systems using the ISPK-08 software component contain multiple system binaries with overly permissive file permissions. Several binaries executed by the root user are writable and executable by unprivileged local users. An attacker with local access can replace or modify these binaries to execute arbitrary commands with root privileges, enabling local privilege escalation.

Affected products (as reported)

Vendor	Product	Versions
Glory Global Solutions	RBG-100	0

Weakness: CWE-732 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

https://www.glory-global.com/ product
https://www.vulncheck.com/advisories/glory-rbg-100-recycler-system-local-privilege-escalation-via-insecure-file-permissions third-party-advisory