CVE-2026-42936

HighCVSS 7.8

Published: 15/07/2026(UTC)Updated: 15/07/2026(UTC)Translated: 16/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.14%

4th percentile - higher than 4% of all known CVEs

Summary

The HYPER SBI 2 installer insecurely loads Dynamic Link Libraries. If a crafted DLL is present in the same directory when the installer is invoked, arbitrary code may be executed with the privilege of the user running the installer.

Risk Assessment

An attacker can place a malicious DLL in the installer's directory, leading to system compromise with the victim's privileges.

Recommendation

Immediately update HYPER SBI 2 to the latest version and run the installer only from trusted locations.

Other vulnerabilities in HYPER SBI 2

CVE-2017-10885High
CVE-2017-10885 describes an untrusted search path vulnerability in HYPER SBI Ver. 2.2 and earlier, allowing an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Original NVD description (English source)

The installer of HYPER SBI 2 insecurely loads Dynamic Link Libraries. If there is a crafted DLL at the same directory when invoking the affected installer, arbitrary code may be executed with the privilege of the user invoking the installer.