CVE 8.5 HIGH

CVE-2026-8797_CVE-2026-8797

8.5 / 10
HIGH
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Description

An access control deficiency vulnerability exists in ExpressUpdate Agent for Windows. If a malicious user gains access to the product, arbitrary code could be executed with SYSTEM privileges.

AI Analysis

Access control deficiency vulnerability allowing arbitrary code execution with SYSTEM privileges

Basic Information

ID CVE-2026-8797
Source NEC
Published Jun 26, 2026 at 04:14
Modified Jun 26, 2026 at 04:19

Affected Product

Vendor NEC Corporation
Product ExpressUpdate Agent for Windows
Version 3.24 and prior
Affected Versions NEC Corporation ExpressUpdate Agent for Windows 3.24 and prior

CWE Classification

AI Assessment

AI Score 8.5 / 10
AI Severity High
Vendor NEC Corporation
Product ExpressUpdate Agent for Windows
Version 3.24 and prior

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.