CVE-2026-57895
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
In Pupsman versions prior to 3.9.0, there is an incorrect default permissions issue. An attacker can place a malicious executable in the installation folder, leading to arbitrary code execution with SYSTEM privileges.
Risk Assessment
The risk for the organization includes full system compromise by the attacker, potentially resulting in data theft, malware installation, or further attacks on the infrastructure.
Recommendation
It is recommended to immediately update Pupsman to version 3.9.0 or later. Also, check and correct the permissions on the installation folder to prevent write access by unauthorized users.
Original NVD description (English source)
Incorrect default permissions issue exists in Pupsman versions prior to 3.9.0. An attacker can place a malicious executable in the installation folder, which results in arbitrary code execution with SYSTEM privilege