CVE-2026-63727
Last modified
CVE-2026-63727 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. Anchore Enterprise versions from 5.11.0 to 5.27.1 and 6.0.0 contain an improper privilege escalation vulnerability in the user management API. An authenticated attacker who is able to access the Anchore Enterprise API could issue an API call capable of modifying user permissions to gain access to additional resources and operations.
Description
Anchore Enterprise versions from 5.11.0 to 5.27.1 and 6.0.0 contain an improper privilege escalation vulnerability in the user management API. An authenticated attacker who is able to access the Anchore Enterprise API could issue an API call capable of modifying user permissions to gain access to additional resources and operations. It is not possible to grant the system-admin role, but a read only user could be granted write access. This issue is fixed in Anchore Enterprise 5.27.2 and 6.0.1.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Anchore | Anchore Enterprise | >= 5.11.0, < 5.27.2; >= 6.0.0, < 6.0.1 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-63727?
How severe is CVE-2026-63727?
How do I fix CVE-2026-63727?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-6369An improper access control vulnerability in the canonical-li…5.5
- CVE-2026-6370Improper Neutralization of Input During Web Page Generation …5.9
- CVE-2026-6371Improper neutralization of input during web page generation …4.8
- CVE-2026-6372Missing Authorization vulnerability in Plisio Accept Cryptoc…7.5
- CVE-2026-63720datamodel-code-generator prior to version 0.70.0 contains a …7.5
- CVE-2026-63725sysPass's FileBackupService::doBackupFiles() in lib/SP/Servi…8.6
- CVE-2026-63728Gitleaks prior to 8.30.1 contains a template injection vulne…8.1
- CVE-2026-63729The SyncTeX parser (synctex_parser.c) shipped with TeX Live …6.8
- CVE-2026-6373Exposure of sensitive system information to an unauthorized …6.5
- CVE-2026-63730HyperDX before 2.31.0 contains a server-side request forgery…5.3
- CVE-2026-63731HyperDX before 2.31.0 contains a server-side request forgery…7.7
- CVE-2026-637329router 0.4.59 (fixed in 0.4.60) contains a chain of vulnera…9.9
Are you affected by CVE-2026-63727?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST