CVE Catalog

CVE-2026-57239

HighCVSS 8.2
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.11%

2th percentile - higher than 2% of all known CVEs

Summary

The vulnerability allows low-privilege users to execute arbitrary executable files with NT AUTHORITY\SYSTEM privileges, enabling privilege escalation.

Risk Assessment

An attacker can gain full control over the system with the highest privileges, leading to complete compromise of confidentiality, integrity, and availability.

Recommendation

Immediately update the software to a version that fixes this vulnerability and restrict the ability of unprivileged users to execute files.

Original NVD description (English source)

The user-controllable executable files will be directly executed by high-privilege processes, allowing low-privilege users to have the opportunity to elevate their privileges to NT AUTHORITY\SYSTEM.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS