Ercom

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Ercom records in CISA KEV

No Ercom vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-00653 CVE-2026-0873 · GHSA-cx4q-rcwp-3qpw

Privilege Elevation in Ercom Cryptobox administration console

LOW 28

On a Cryptobox platform where administrator segregation based on entities is used, some vulnerabilities in Ercom Cryptobox administration console allows an authenticated entity administrator with knowledge to elevate his…

CVSS 4.0MEDIUM 4.8 Network High privileges No interaction EPSS 0.00282 Published 2026-02-04 Fixed in v4.40.x CWE-1220

TI-2026-05075 CVE-2026-5794 · GHSA-f82c-vj6w-xx38

Vulnerability in Cryptobox allows an authenticated user to trigger an account lockout

LOW 22

A vulnerability affecting the detailed versions of Cryptobox allows a legitimate user to prevent another to login by triggering an account lockout via sending a specially crafted request.

CVSS 4.0MEDIUM 4.9 Network Low privileges No interaction EPSS 0.00256 Published 2026-04-28 Fixed in 4.40.175, 4.37.237 CWE-694

TI-2025-13037 CVE-2025-14266 · GHSA-235f-rjgh-phvr

Cross-site request forgery in Ercom Cryptobox

LOW 4

CSRF in Ercom Cryptobox administration console allows attacker to trigger some actions on behalf of a Cryptobox administrator.

CVSS 4.0LOW 0.6 Network No auth User interaction EPSS 0.00179 Published 2025-12-17 Fixed in 4.37.229, 4.39.200 CWE-352

Open these records in search →

Critical	0
High	0
Medium	2
Low	1
No CVSS	0