CVE-2026-26306

Summary

The installer for OM Workspace (Windows Edition) Ver 2.4 and earlier insecurely loads Dynamic Link Libraries (DLLs), which could allow an attacker to execute arbitrary code with the privileges of the user invoking the installer.

Affected Software

Weaknesses

• CWE-427: Uncontrolled Search Path Element

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://support.jp.omsystem.com/en/support/imsg/digicamera/info/omws.html
• https://jvn.jp/en/jp/JVN19505323/

• ←Previous
• Next→