{"vulnerability": "CVE-2026-65199", "sightings": [{"uuid": "40360e79-ba5a-421e-b14a-ebac3659ece6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-65199", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117434153038717817", "content": "CVE-2026-65199 Huawei openUBMC low-privilege SNMP to administrator privilege escalation openUBMC assigns the full privilege set to pseudo-identities representing SNMP callers. An authenticated, but low-privilege, SNMP user can therefore invoke mapped backend operations as an administrative identity. In `route_mapper/account.lua`, `get_user_privilege` returns the complete nine-privilege set for a `special_users` group that includes the `SNMPv1_v2c` pseudo-user.\nhttps://www.cve.org/CVERecord?id=CVE-2026-65199https://www.runzero.com/advisories/huawei-openUBMC-snmp-privsec-cve-2026-65199#Huawei #openBMC#CVE_2026_65199#bot", "creation_timestamp": "2026-10-13T14:49:30.456798Z"}]}