CVE-2025-13176

High

Published: 30/01/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

CVE-2025-13176 in ESET Inspect Connector allows loading a malicious DLL by planting a custom configuration file. An attacker could exploit this to execute arbitrary code in the context of the application.

Risk Assessment

The risk involves potential system compromise on hosts running ESET Inspect Connector, which could lead to data theft, privilege escalation, or lateral movement within the network.

Recommendation

It is recommended to immediately update ESET Inspect Connector to the latest patched version and restrict write access to configuration directories to trusted administrators only.

Other vulnerabilities in ESET Inspect Connector

CVE-2026-6423High
A local privilege escalation vulnerability in ESET Inspect Connector. The issue is caused by improper authentication in an IPC channel.

Original NVD description (English source)

Planting a custom configuration file in ESET Inspect Connector allow load a malicious DLL.