What is CVE-2026-19359?

CVE-2026-19359 is a medium-severity vulnerability in Nxp-auto-goldvip Gvip, classified under Incorrect Privilege Assignment. CVSS score: 4.7/10. Published 2026-08-09.

How severe is CVE-2026-19359?

Medium severity. CVSS v3 base score is 4.7 out of 10.

Privilege escalation in Nxp-auto-goldvip Gvip

CVE-2026-19359

A security vulnerability has been detected in nxp-auto-goldvip gvip up to 1.4.0. Affected by this issue is the function SitewiseCustomFunction of the component Lambda Function Handler. Such manipulation leads to improper access controls. T…

CVSS v3 metric

CVSS v3 base score 4.7 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L.

Affected products

Nxp-auto-goldvip Gvip — versions 1.0, 1.1, 1.2

Weakness classification (CWE)

References

cna@vuldb.com (technical-description, vdb-entry)
cna@vuldb.com (signature, permissions-required)
cna@vuldb.com (third-party-advisory)
cna@vuldb.com (third-party-advisory)
cna@vuldb.com (patch)

Frequently asked questions

What is CVE-2026-19359?: CVE-2026-19359 is a medium-severity vulnerability in Nxp-auto-goldvip Gvip, classified under Incorrect Privilege Assignment. CVSS score: 4.7/10. Published 2026-08-09.
How severe is CVE-2026-19359?: Medium severity. CVSS v3 base score is 4.7 out of 10.