CVE-2026-56437
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
An uncontrolled search path element issue exists in Pupsman versions prior to 3.9.0. If a crafted DLL file is placed in the same folder as the affected installer and the installer is executed, arbitrary code may be executed with SYSTEM privilege.
Risk Assessment
The risk involves potential privilege escalation to SYSTEM level by an attacker with local system access who can place a malicious DLL in the installer's folder.
Recommendation
Immediately update Pupsman to version 3.9.0 or later. Before running the installer, ensure no unknown DLL files are present in its folder.
Original NVD description (English source)
Uncontrolled search path element issue exists in Pupsman versions prior to 3.9.0. If a crafted DLL file is placed in the same folder as the affected installer and the installer is executed, arbitrary code may be executed with SYSTEM privilege.