[Security Bulletin] TXOne Networks Removable Media Validation function Improper Access Control vulnerability

Overall Information

• Original Released Date: July 17, 2026
• Update Date: July 17, 2026
• CVE Identifier(s) (If appliable): CVE-2024-41993
• CVSS Version 3.1
  • Severity: Medium
  • Score: 4.4
  • Vector String: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
• CVSS Version 4.0
  • Severity: Medium
  • Score: 6.7
  • Vector String: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

TXOne Networks has released new SafePortAgent and StellarProtect that resolve the vulnerability in the product.

Description

Improper Access Control vulnerability in the Removable Media Validation function of TXOne Networks products allows a local attacker with administrator privileges to bypass the file lockdown mechanism, resulting in unauthorized file transfer to the victim device. The attacker needs to deploy unauthorized file on the removable media in advance.
This issue affects SafePortAgent: before 3.2.5024; StellarProtect: from 3.2.4011 before 5.0.1083.

Affected Version(s)

Solution

TXOne Networks has released the following solution to address the issue

These are the minimum recommended version(s) of the patches and/or builds required to address the issue. TXOne Networks highly encourages customers to obtain the latest version of the product if there is a newer one available than the one listed in this bulletin.

Acknowledgement

TXOne Networks would like to thank the following individual for responsibly disclosing these issues and working with TXOne Networks to help protect our customers:

• Sven Nottelman of Actemium

External Reference(s)

• CVE-2026-41993
• https://www.txone.com/psirt/cve-2026-41993/

If you encounter any problems related to this vulnerability, please contact security@txone.com