Improper Access Control in TXOne Networks Products
CVE-2026-41993

6.7MEDIUM

Key Information:

Vendor

Txone Networks

Status
Safeportagent
Stellarprotect
Vendor
CVE Published:
17 July 2026

What is CVE-2026-41993?

The vulnerability in TXOne Networks products arises from improper access control within the Removable Media Validation function. A local attacker, holding administrative rights, can exploit this weakness to circumvent the file lockdown mechanism, allowing unauthorized file transfers to the victim device. To perform this attack, the assailant must first place malicious files onto the removable media, which can lead to significant security breaches.

Affected Version(s)

SafePortAgent 0 < 3.2.5024

StellarProtect 3.2.4011 < 5.0.1083

References

https://www.txone.com/psirt/cve-2026-41993/
vendor-advisory

CVSS V4

Score:
6.7
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.