CVE-2026-40851

High

Published: 27/05/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A local attacker can perform a confusion attack on the cfgparser via a specially crafted file on a USB stick leading to code execution. This can result in a total loss of confidentiality, integrity, and availability.

Risk Assessment

This attack poses a serious risk to organizations as it may lead to unauthorized access to systems and data. The loss of confidentiality, integrity, and availability can have catastrophic effects on business operations.

Recommendation

It is recommended to restrict access to USB ports and implement file scanning mechanisms before opening files. Regularly updating software is also advised to minimize the risk of exploiting this vulnerability.

Original NVD description (English source)

A local attacker can perform a confusion attack on the cfgparser via a specially crafted file on an USB stick leading to code execution. This can result in a total loss of confidentiality, integrity and availability.