OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-79298

HIGH · CVSS 8.4 EPSS 0.19% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-16 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

Howyar Technologies Inc SysReturn versions prior to 11.3.034 are vulnerable to local code execution due to a flaw in the BOOTia32.efi file, which can be exploited using a specially crafted cloak32.dat file on the EFI System Partition (ESP). This vulnerability poses a significant risk as it allows attackers to execute arbitrary code, potentially compromising system integrity. Organizations using affected versions should prioritize remediation to mitigate the risk of local exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-79298
Severity
HIGH
CVSS
8.4
EPSS
0.19%

Original NVD Description

An issue in Howyar Technologies Inc SysReturn Versions prior to 11.3.034 and fixed in v.11.3.0.34 allows a local attcker to execute arbitrary code via the BOOTia32.efi and a crafted cloak32.dat file on the ESP.