8.5
/ 10
HIGH
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Description
An access control deficiency vulnerability exists in ExpressUpdate Agent for Windows. If a malicious user gains access to the product, arbitrary code could be executed with SYSTEM privileges.
AI Analysis
Access control deficiency vulnerability allowing arbitrary code execution with SYSTEM privileges
Basic Information
ID
CVE-2026-8797
Source
NEC
Published
Jun 26, 2026 at 04:14
Modified
Jun 26, 2026 at 04:19
Affected Product
Vendor
NEC Corporation
Product
ExpressUpdate Agent for Windows
Version
3.24 and prior
Affected Versions
NEC Corporation ExpressUpdate Agent for Windows 3.24 and prior
CWE Classification
AI Assessment
AI Score
8.5 / 10
AI Severity
High
Vendor
NEC Corporation
Product
ExpressUpdate Agent for Windows
Version
3.24 and prior