CVE-2026-3669

MEDIUM

Freedom Factory dGEN1 <20260221 - Privilege Escalation

Title source: llm
STIX 2.1

Description

A security vulnerability has been detected in Freedom Factory dGEN1 up to 20260221. This impacts the function AlarmService of the component com.dgen.alarm. Such manipulation leads to improper authorization. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

References (4)

Core 4
Core References
Permissions Required, VDB Entry vdb-entry technical-description
https://vuldb.com/?id.349557
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.349557
Permissions Required, VDB Entry third-party-advisory
https://vuldb.com/?submit.764703

Scores

CVSS v3 5.3
EPSS 0.0010
EPSS Percentile 1.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-266 CWE-285
Status published
Published Mar 07, 2026
Tracked Since Mar 08, 2026