CVE-2026-75171

Deferred Deferred - Pending Action

Privilege Escalation in HubCore via Session Cookie

Publication date: 2026-09-04

Last updated on: 2026-09-14

Assigner: MITRE

Description

An issue in HubCore v.14.1.1 allows a remote attacker to escalate privileges via the HUBCOREID session cookie handling component.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-04

Last Modified

2026-09-14

Generated

2026-09-25

AI Q&A

2026-09-04

EPSS Evaluated

2026-09-23

NVD

CVE-2026-75171

EUVD

EUVD-2026-71442

Affected Vendors & Products

Vendor	Product	Version / Range
hubcore	hubcore	14.1.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-384	Authenticating a user, or otherwise establishing a new user session, without invalidating any existing session identifier gives an attacker the opportunity to steal authenticated sessions.

Attack-Flow Graph

Executive Summary

This vulnerability is a privilege escalation issue in HubCore version 14.1.1. It allows a remote attacker to gain higher access levels by exploiting improper handling of the HUBCOREID session cookie.

Detection Guidance

The provided CVE details a privilege escalation issue in HubCore v14.1.1 via session cookie handling. To detect this, inspect HTTP requests for the HUBCOREID cookie in network traffic or logs. Check for unusual privilege changes in user sessions. No specific commands are provided in the context.

Impact Analysis

If exploited, this vulnerability could let an attacker take control of affected systems, access sensitive data, or perform unauthorized actions. Systems running HubCore v14.1.1 are at risk.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or sensitive data, violating GDPR and HIPAA compliance. Organizations may face legal penalties or reputational damage if exploited.

Mitigation Strategies

Immediately update HubCore to the latest version to address the session cookie handling flaw. Disable or restrict access to the HUBCOREID component if possible. Monitor network traffic for unusual privilege escalation attempts.

Hi! I’m here to help you understand CVE-2026-75171. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70