Medium severity · published Feb 4, 2026
CVE-2026-0873
Privilege Elevation in Ercom Cryptobox administration console
4.8
CVSS
0.3%
EPSS
No
On KEV
Description
On a Cryptobox platform where administrator segregation based on entities is used, some vulnerabilities in Ercom Cryptobox administration console allows an authenticated entity administrator with knowledge to elevate his account to global administrator.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 20% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CR
Cryptobox · Ercom
All versions, or not specified · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-0873
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-0873
info.cryptobox.com
https://info.cryptobox.com/doc/v4.40/4.40.en/
More from Cryptobox
7.5
CVE-2026-6805
Vulnerability on Cryptobox external sharing feature
4.9
CVE-2026-5794
Vulnerability in Cryptobox allows an authenticated user to trigger an account lockout
0.6
CVE-2025-14266
CSRF in Ercom Cryptobox administration console