[CVE-2026-57895] Incorrect default permissions issue exists in Pupsman versions prior to 3.9.0. An attacker can place…

Descripción técnica

Incorrect default permissions issue exists in Pupsman versions prior to 3.9.0. An attacker can place a malicious executable in the installation folder, which results in arbitrary code execution with SYSTEM privilege

Puntuación CVSS

Score: 7.8/10 — Severidad: HIGH — Estado NIST: Deferred

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Debilidades (CWE)

CWE-276

Fuente oficial

Publicado en NIST NVD.