Improper Access Control in CatchPulse's Named Pipe Interface
CVE-2026-55979

5.2MEDIUM

Key Information:

Vendor

Secureage

Status
CatcHPulse
Vendor
CVE Published:
6 August 2026

What is CVE-2026-55979?

An improper access control check in CatchPulse's named pipe communication interface poses a risk by allowing attackers to invoke specific functions within CatchPulse. This vulnerability is especially concerning as it pertains to operations that are designed to enforce restrictive security policies, potentially compromising system integrity and security.

Affected Version(s)

CatchPulse 10.10.0 and earlier

References

https://www.csa.gov.sg/alerts-and-advisories/alerts/al-20...
https://www.secureage.com/security-vulnerabilities#

CVSS V3.1

Score:
5.2
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mr Ang Kar Min
.