Is CVE-2026-20484 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-20484?

CVE-2026-20484 has a CVSS v3 severity of MEDIUM (4.4).

Back

CVE-2026-20484

Description

In TFA, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11053160; Issue ID: MSV-8004.