Security Advisory

CVE-2026-7280

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-04-28 09:46:52

Last updated 2026-04-28 12:12:53

Assigner twcert

CVSS score 8.4

State PUBLISHED

Description

AVACAST developed by eMPIA Technology has a Unquoted Service Path vulnerability, allowing privileged local attackers to place a malicious executable file in a specific directory, resulting in arbitrary code execution with system privileges when the AVACAST service starts.

← Browse all CVEs View on cve.org ↗