Beveiligingsadvies

CVE-2026-5789

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-21 14:22:05

Laatst bijgewerkt 2026-04-21 19:27:53

Toegewezen door INCIBE

CVSS-score 8.5

Status PUBLISHED

Beschrijving

Vulnerability related to an unquoted search path in CivetWeb v1.16. This vulnerability allows a local attacker to execute arbitrary code with elevated privileges by placing a malicious executable in a directory that is scanned before the intended application path (C:\Program Files\CivetWeb\CivetWeb.exe --), due to the absence of quotes in the service configuration.

← Alle CVE's bekijken Bekijk op cve.org ↗