CVE-2026-92252

MediumCVSS 5.9

Published: 20/09/2026(UTC)Updated: 22/09/2026(UTC)Translated: 20/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.10%

1th percentile - higher than 1% of all known CVEs

Summary

Incorrect default permissions in the installation directory of WatchDog Anti-Virus on Windows allow local, low-privileged users to modify, replace, or delete antivirus binaries and configuration files, because the installer grants the Users group Full Control over C:\Program Files (x86)\Watchdog Anti-Virus. This may disable antivirus protection or enable privileged code execution if modified binaries are loaded by an elevated WatchDog process.

Risk Assessment

The risk includes complete disabling of antivirus protection or privilege escalation, which could lead to system compromise by an attacker.

Recommendation

It is recommended to immediately restrict permissions to the WatchDog Anti-Virus installation directory so that the Users group does not have Full Control, and to apply updates from the vendor.

Other vulnerabilities in WatchDog Anti-Virus

CVE-2026-92253Medium
Improper link resolution before file access in the quarantine restoration process of WatchDog Anti-Virus 1.8.640 on Windows allows local, low-privileged attackers to cause a quarantined file to be written to an arbitrary filesystem location by creating a directory junction at the original file path and persuading an administrator to restore the file.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS