Security Bulletin: File permission modification, improper access control, and other ...

Back Ibm

Security Bulletin: File permission modification, improper access control, and other ...

Ibm • February 17, 2026

Share: View original

CVSS Source: [email protected]. CVSS Base score: 7.1. CVSS Vector: ( CVSS :3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H) CVEID: CVE-2025-53066

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CVE-2023-2861 and CVE-2025-53066: Access Control Vulnerabilities Identified CVE-2023-2861, published on December 6, 2023, details an improper access control issue in Qemu affecting special files. Additionally, CVE-2025-53066, published on October 21, 2025, highlights file permission modifications and improper access control with a CVSS base score of 7.1, impacting various systems. Both vulnerabilities require attention from affected users and administrators. 2 sources 37

Extracted Entities

CVEs (1)