CVE-2026-13268

Summary

G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

The specific flaw exists within the Backup Service. By creating a symbolic link, an attacker can abuse the service to delete a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-28665.

Affected Software

Weaknesses

• CWE-59: CWE-59: Improper Link Resolution Before File Access ('Link Following')

References

• https://www.zerodayinitiative.com/advisories/ZDI-26-432/

• ←Previous
• Next→