SALTO ProAccess Space

Expand All + CVE-2026-11889 SALTO ProAccess Space software using the tenancy feature / logical partition is vulnerable to a privilege escalation attack that could allow an authorized attacker to access any space managed by the affected product. View CVE Details Affected Products SALTO ProAccess Space Vendor:SALTO Product Version:SALTO ProAccess Space: <6. 13 Product Status:known_affected Remediations MitigationUsers of SALTO ProAccess using the tenancy feature should upgrade to version 6. 13. Vendor fixTo further enhance security after applying the update: 1.

Operate ProAccess Space on a protected internal network and avoid exposing it directly to the Internet. 2. Restrict operator-level accounts to the minimum required and apply least-privilege principles. 3. If feasible, disable the partitioning feature and operate under a single partition.

4. When strong tenant separation is required, consider running separate Space instances (isolated environments) rather than relying solely on logical partitioning. Relevant CWE: CWE-639 Authorization Bypass Through User-Controlled Key Metrics CVSS Version Base Score Base Severity Vector String 3. 1 6. 5 MEDIUM CVSS:3.

1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N 4. 0 7. 1 HIGH CVSS:4.