CVE-2026-120490
LOW
NVD
CVSS Score
3.8
Severity
LOW
Published
Nov 12, 2026
Vendor
unknown
Description
On Scalable Platforms, an administrator with permissions to edit and install the Access Control Policy and NAT rules can create a NAT rule that redirects traffic to the Gateway's Sync interface, bypassing the built-in Sync protection. This could allow the administrator to execute operating system commands and write files on the Gateway with superuser privileges.