CVE-2026-103470
In Internet2 Grouper before 7.5.1 (in some configurations), a user who is allowed to create or edit rules in the User Interface can escalate privileges.
- Published Sep 30, 2026
- CVSS 9.3 critical
- 0.3% chance of exploitation in the next 30 days (EPSS)
- A fix is available