https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 13:08:53 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-330531 EUVD-2026-330531 https://cve.radiocsirt.org/vuln/euvd-2026-330531 https://cve.radiocsirt.org/vuln/fkie_cve-2026-8797 <p>An access control deficiency vulnerability exists in ExpressUpdate Agent for Windows. If a malicious user gains access to the product, arbitrary code could be executed with SYSTEM privileges.</p> <p>An access control deficiency vulnerability exists in ExpressUpdate Agent for Windows. If a malicious user gains access to the product, arbitrary code could be executed with SYSTEM privileges.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-8797 https://cve.radiocsirt.org/vuln/ghsa-cxm7-54mf-pwwg <p>An access control deficiency vulnerability exists in ExpressUpdate Agent for Windows. If a malicious user gains access to the product, arbitrary code could be executed with SYSTEM privileges.</p> <p>An access control deficiency vulnerability exists in ExpressUpdate Agent for Windows. If a malicious user gains access to the product, arbitrary code could be executed with SYSTEM privileges.</p> https://cve.radiocsirt.org/vuln/ghsa-cxm7-54mf-pwwg https://cve.radiocsirt.org/vuln/jvndb-2026-000088 <p>ExpressUpdate Agent for Windows provided by NEC Corporation is the software module for NEC server products, to support remote management of installed software. ExpressUpdate Agent for Windows configures its named pipe with an improper access restriction.&lt;a href=&#39;https://cwe.mitre.org/data/definitions/782.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://www.cve.org/CVERecord?id=CVE-2026-8797&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;Exposed IOCTL with Insufficient Access Control (CWE-782) - CVE-2026-8797&lt;/li&gt;&lt;/ul&gt;MASAHIRO IIDA of LAC Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>ExpressUpdate Agent for Windows provided by NEC Corporation is the software module for NEC server products, to support remote management of installed software. ExpressUpdate Agent for Windows configures its named pipe with an improper access restriction.&lt;a href=&#39;https://cwe.mitre.org/data/definitions/782.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://www.cve.org/CVERecord?id=CVE-2026-8797&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;Exposed IOCTL with Insufficient Access Control (CWE-782) - CVE-2026-8797&lt;/li&gt;&lt;/ul&gt;MASAHIRO IIDA of LAC Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2026-000088