CVE-2020-25826

HIGH 7.8CVE-2020-25826 · Published 23/09/2020 · updated 17/06/2026

In short

CVE-2020-25826 is a HIGH (CVSS 7.8) vulnerability affecting pingid integration for windows login (pingidentity).
Chance of exploitation in the next 30 days (EPSS): 0.43%, higher than 36.9% of all vulnerabilities.
Fix: update to 2.4.2 or later.

Package	Affected versions	Patched versions
pingid integration for windows login pingidentity	`< 2.4.2`	`2.4.2`

PingID Integration for Windows Login before 2.4.2 allows local users to gain privileges by modifying CefSharp.BrowserSubprocess.exe.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

< 2.4.2

2.4.2

More vulnerabilities in pingid integration for windows login

See all →