PatchSiren

Cellopoint CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Cellopoint CVE published 2026-06-12

CVE-2026-12059

CVE-2026-12059 is an Improper Access Control vulnerability in the SSH service of CelloOS developed by Cellopoint. The vulnerability allows authenticated remote attackers to bypass enforced command restrictions and execute operating system commands outside the originally authorized scope. The CVSS score for this vulnerability is 8.7, indicating a HIGH severity level.