CVE-2026-33390

highCVSS 8.1covered by 1 sourcefirst seen 2026-07-09

An Incorrect Privilege Assignment vulnerability was discovered in the synchronization functionality due to Arc sensors receiving CLI permissions. An authenticated user with limited privileges can push administrative CLI commands through the sync, altering the device configuration, and/or affecting its availability.

⚡ Watch CVE-2026-33390

Get an email if CVE-2026-33390 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Exploitation outlook

Low exploitation risk0.21% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 11% of all EPSS-scored CVEs.

Advisory coverage (1)

highCVE-2026-33390: An Incorrect Privilege Assignment vulnerability was discovered in the synchronization function…nvd · 2026-07-09

External references

NVD record for CVE-2026-33390

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-33390 status](https://www.csirts.com/badge/CVE-2026-33390)](https://www.csirts.com/cve/CVE-2026-33390)