high7.8
CVE-2026-2123
A security audit identified a privilege escalation vulnerability in Operations Agent(<=OA 12.29) on Windows.
Impact
A security audit identified a privilege escalation vulnerability in Operations Agent(<=OA 12.29) on Windows. Under specific conditions Operations Agent may run executables from specific writeable locations.Thanks to Manuel Rickli & Philippe Leiser of Oneconsult AG for reporting this vulnerability
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microfocus | Operations Agent | from 12.22 through 12.29 |