Description
Improper Access Control in the program installation folder in NEC Corporation WebSAM Winshare Ver 7.5.0 and earlier (excluding Ver 7.3.3), Ver 7.6.0 and Ver 7.7.0 through 7.7.1 on Windows allows a locally authenticated low-privileged attacker to execute arbitrary code with SYSTEM privileges via a crafted DLL file that is loaded by a SYSTEM-level process.
Published: 2026-11-09
Score: 8.5 High
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 09 Nov 2026 05:45:00 +0000

Type Values Removed Values Added
Title Local Privilege Escalation via Improper Access Control in WebSAM WinShare Installation Folder

Mon, 09 Nov 2026 04:15:00 +0000

Type Values Removed Values Added
Description Improper Access Control in the program installation folder in NEC Corporation WebSAM Winshare Ver 7.5.0 and earlier (excluding Ver 7.3.3), Ver 7.6.0 and Ver 7.7.0 through 7.7.1 on Windows allows a locally authenticated low-privileged attacker to execute arbitrary code with SYSTEM privileges via a crafted DLL file that is loaded by a SYSTEM-level process.
Weaknesses CWE-276
References
Metrics cvssV4_0

{'score': 8.5, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: NEC

Published:

Updated: 2026-11-09T04:10:22.553Z

Reserved: 2026-10-20T01:52:24.557Z

Link: CVE-2026-113362

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-11-09T04:17:06.133

Modified: 2026-11-09T04:17:06.133

Link: CVE-2026-113362

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-11-09T05:30:05Z

Weaknesses
  • CWE-276

    Incorrect Default Permissions