CVE-2026-22078
O+ Connect's lack of authentication for IPC channels led to a local privilege escalation vulnerability.
Because O+ Connect's IPC service does not authenticate clients, external applications can escalate privileges and perform sensitive actions through the IPC channel.
CVSS 3.1 · 7.3 High
EPSS < 1%
KEV · Not listed
Vendors
Products