CVE-2020-7293: McAfee Web Gateway

Critical severity, CVSS 9.0. EPSS: 0.7% chance of exploitation in the next 30 days.

Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user with low permissions to change the system's root password via improper access controls in the user interface.

Affected products

• McAfee Web Gateway: from 7.8.0, before 7.8.2.23 (fixed in 7.8.2.23); from 8.2.0, before 8.2.11 (fixed in 8.2.11); from 9.0.0, before 9.2.3 (fixed in 9.2.3)

Published 2020-09-15. Last modified 2026-06-17.