CVEvulnerability
CVE-2026-43510
5.1 MEDIUM
Official page ↗
- Status
- Awaiting Analysis
- Published
- 2026-05-07
- Last modified
- 2026-10-26
- Assigner
- 9119a7d8-5eab-497f-8521-727c672e3725
- CVSS 4.0 (9119a7d8-5eab-497f-8521-727c672e3725)
- 5.1 MEDIUM — CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- CVSS 3.1 (9119a7d8-5eab-497f-8521-727c672e3725)
- 5.9 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H
- Weaknesses
- CWE-266
Description
manage.get.gov is the .gov TLD registrar maintained by CISA. manage.get.gov allows an organization administrator to assign domain manager privileges for domains not already in another organization. Fixed in 1.176.0 on or around 2026-04-30.
Related
Weakness · CWE (1)
- CWE-266 Incorrect Privilege Assignment weakness
References
- https://github.com/cisagov/manage.get.gov/issues/4858 github.com
- https://github.com/cisagov/manage.get.gov/pull/4900 github.com
- https://github.com/cisagov/manage.get.gov/releases/tag/v1.176.0 github.com
- https://github.com/cisagov/manage.get.gov/security/advisories/GHSA-6wrg-x3j6-x464 github.com
- https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-121-01.json raw.githubusercontent.com
- https://www.cve.org/CVERecord?id=CVE-2026-43510 www.cve.org
- https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:H/SA:H www.first.org