CVE-2023-41264

CVE-2023-41264 is a critical authentication bypass vulnerability affecting Netwrix Usercube installations prior to version 6.0.215. Specifically, misconfigured on-premises deployments lacking required restSettings fields for deployment endpoints can allow unauthenticated attackers to achieve privilege escalation. With a CVSS score of 9.8 (Critical), this vulnerability has a network attack vector, low attack complexity, and can lead to complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code, the vulnerability has garnered significant community discussion, indicating awareness among security researchers.