Threat Investigation
Request a demo

CVE-2026-11889

Medium

Description

SALTO ProAccess Space software using the tenancy feature / logical partition is vulnerable to a privilege escalation attack that could allow an authorized attacker to access any space managed by the affected product.

SeverityMedium
CVSS6.5
Exploit probability—
ProductProAccess Space
PublishedJul 16, 2026
First seenJul 16, 2026
Weakness typeCWE-639Authorization bypass through user-controlled key

How to fix

Update
  • SALTO ProAccess Space6.13 or later

Affected products

ProductAffected versionsFixed in
SALTO ProAccess Spacev < 6.136.13

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.