High severityNVD Advisory· Published Sep 14, 2026· Updated Sep 14, 2026

CVE-2026-20773

Description

A role-based access control issue was identified in the administrative expression evaluation functionality. This could allow users with certain administrative roles to access expression testing capabilities beyond their intended permissions.

Affected products

Pingidentity/Pingfederatellm-fuzzy

Patches

Vulnerability mechanics

References

support.pingidentity.com/s/article/SECADV054-Improper-Authorization-in-PingFederate-Administrative-Expression-Evaluation-Endpointnvd

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000