Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2026-43510
PUBLISHED
More InfoOfficial Page
Assigner-cisa-cg
Assigner Org ID-9119a7d8-5eab-497f-8521-727c672e3725
View Known Exploited Vulnerability (KEV) details
Published At-07 May, 2026 | 18:50
Updated At-10 May, 2026 | 14:54
Rejected At-
▼CVE Numbering Authority (CNA)
CISA manage.get.gov insecure portfolio administrative privileges

manage.get.gov is the .gov TLD registrar maintained by CISA. manage.get.gov allows an organization administrator to assign domain manager privileges for domains not already in another organization. Fixed in 1.176.0 on or around 2026-04-30.

Affected Products
Vendor
CISA
Product
manage.get.gov
Default Status
unknown
Versions
Affected
  • From 1.92.0 before 1.176.0 (custom)
Unaffected
  • 1.176.0
Problem Types
TypeCWE IDDescription
CWECWE-266CWE-266 Incorrect Privilege Assignment
Type: CWE
CWE ID: CWE-266
Description: CWE-266 Incorrect Privilege Assignment
Metrics
VersionBase scoreBase severityVector
4.07.0HIGH
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
3.17.6HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:H
Version: 4.0
Base score: 7.0
Base severity: HIGH
Vector:
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
Version: 3.1
Base score: 7.6
Base severity: HIGH
Vector:
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:H
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
bn-omran (@scofaild23)
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://github.com/cisagov/manage.get.gov/pull/4900
patch
https://github.com/cisagov/manage.get.gov/releases/tag/v1.176.0
release-notes
https://github.com/cisagov/manage.get.gov/security/advisories/GHSA-6wrg-x3j6-x464
vendor-advisory
https://www.cve.org/CVERecord?id=CVE-2026-43510
vdb-entry
https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-121-01.json
government-resource
third-party-advisory
https://github.com/cisagov/manage.get.gov/issues/4858
issue-tracking
Hyperlink: https://github.com/cisagov/manage.get.gov/pull/4900
Resource:
patch
Hyperlink: https://github.com/cisagov/manage.get.gov/releases/tag/v1.176.0
Resource:
release-notes
Hyperlink: https://github.com/cisagov/manage.get.gov/security/advisories/GHSA-6wrg-x3j6-x464
Resource:
vendor-advisory
Hyperlink: https://www.cve.org/CVERecord?id=CVE-2026-43510
Resource:
vdb-entry
Hyperlink: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-121-01.json
Resource:
government-resource
third-party-advisory
Hyperlink: https://github.com/cisagov/manage.get.gov/issues/4858
Resource:
issue-tracking
▼Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
Details not found