AUGUST 25, 2026
Live Feed
Back to database
Case File

CVE-2026-56437

HIGH · CVSS 7.8 EPSS 0.13%

Source: NVD + CISA KEV + EPSS · Published 2026-07-08 · Last synced 2026-08-07

CyberRota Analysis

AI-Generated

Pupsman versions prior to 3.9.0 are vulnerable to an uncontrolled search path element issue, allowing an attacker to execute arbitrary code with SYSTEM privileges by placing a malicious DLL file in the same directory as the installer. This vulnerability poses a significant risk as it can lead to complete system compromise. Organizations using affected versions should prioritize patching to mitigate potential exploitation.

CVE
CVE-2026-56437
Severity
HIGH
CVSS
7.8
EPSS
0.13%

Original NVD Description

Uncontrolled search path element issue exists in Pupsman versions prior to 3.9.0. If a crafted DLL file is placed in the same folder as the affected installer and the installer is executed, arbitrary code may be executed with SYSTEM privilege.