PT-2026-34651 · Borg · Borg Spm 2007

Published 2026-04-23 · Updated 2026-04-23 · CVE-2026-6886

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Borg SPM 2007 (affected versions not specified)

Description An authentication bypass allows unauthenticated remote attackers to log into the system as any user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1390

Related Identifiers

CVE-2026-6886

Affected Products

Borg Spm 2007

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-6886 · Security Note
• https://twitter.com/OrizonCyber/status/2047307019816681707 · Twitter Post
• https://twcert.org.tw/tw/cp-132-10861-b8709-1.html · Note
• https://twcert.org.tw/en/cp-139-10863-2f48e-2.html · Note
• https://twitter.com/CVEnew/status/2047359865148829938 · Twitter Post