Skip to content
Threat Feed
high advisory

Vitals ESP Incorrect Authorization Vulnerability (CVE-2026-4639)

CVE-2026-4639 is an Incorrect Authorization vulnerability in Galaxy Software Services' Vitals ESP, allowing authenticated remote attackers to perform administrative functions and escalate privileges.

Vitals ESP, developed by Galaxy Software Services, is vulnerable to an Incorrect Authorization issue (CVE-2026-4639). This vulnerability allows attackers with valid user credentials to bypass authorization checks and execute administrative functions they should not have access to. The vulnerability was disclosed on March 24, 2026. An attacker could potentially gain complete control over the Vitals ESP system by exploiting this flaw. The vulnerable software and versions are not specified, so…

Detection coverage 2

Detect VitalsESP Unauthorized Admin Access

high

Detects attempts to access administrative URLs within Vitals ESP without proper authorization, indicating potential privilege escalation.

sigma tactics: privilege_escalation techniques: T1068 sources: webserver, linux

Detect VitalsESP Configuration Changes

medium

Detects attempts to modify configuration files or settings within Vitals ESP, which could indicate unauthorized changes.

sigma tactics: persistence techniques: T1547.001 sources: file_event, linux

Detection queries are kept inside the platform. Get full rules →