CVE-2020-25826

PingID Integration for Windows Login before 2.4.2 allows local users to gain privileges by modifying CefSharp.BrowserSubprocess.exe.

• CWE-732

• https://docs.pingidentity.com/bundle/pingid/page/xqz1597139945488.htmlRelease Notes, Vendor Advisory
• https://gitlab.com/-/snippets/2017709Exploit, Third Party Advisory
• https://docs.pingidentity.com/bundle/pingid/page/xqz1597139945488.htmlRelease Notes, Vendor Advisory
• https://gitlab.com/-/snippets/2017709Exploit, Third Party Advisory

Published

Sep 23, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-25817SilverStripe through 4.6.0-rc1 has an XXE Vulnerability in C…4.8
• CVE-2020-2582Vulnerability in the Oracle iStore product of Oracle E-Busin…8.2
• CVE-2020-25820BigBlueButton before 2.2.7 allows remote authenticated users…6.5
• CVE-2020-25821peg-markdown 0.4.14 has a NULL pointer dereference in proces…7.5
• CVE-2020-25824Telegram Desktop through 2.4.3 does not require passcode ent…2.4
• CVE-2020-25825In Octopus Deploy 3.1.0 to 2020.4.0, certain scripts can rev…7.5
• CVE-2020-25827An issue was discovered in the OATHAuth extension in MediaWi…7.5
• CVE-2020-25828An issue was discovered in MediaWiki before 1.31.10 and 1.32…6.1
• CVE-2020-25829An issue has been found in PowerDNS Recursor before 4.1.18, …7.5
• CVE-2020-2583Vulnerability in the Java SE, Java SE Embedded product of Or…3.7
• CVE-2020-25830An issue was discovered in MantisBT before 2.24.3. Improper …4.8
• CVE-2020-25832Reflected Cross Site scripting vulnerability on Micro Focus …5.4