AUGUST 16, 2026
Live Feed
Back to database
Case File

CVE-2026-51947

CRITICAL · CVSS 9.8 EPSS 1.13%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2026-07-01 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 9.8. It may be remotely exploitable.

CVE
CVE-2026-51947
Severity
CRITICAL
CVSS
9.8
EPSS
1.13%

Original NVD Description

An issue in Pivotal CRM 6.6.4.08 and systems using patch-ghi-15381-cwe-502-20251225.zip (fixed in Pivotal CRM 6.6.5.10 and Patch_CWE502_20260316.zip) allows a remote attacker to execute arbitrary code via the Pivotal.Engine.Client.Services.Conversion.dll component. NOTE: this issue exists because of an incomplete fix for CVE-2026-39253.