CVE-2026-28760

Summary

The installer of RATOC RAID Monitoring Manager for Windows searches the current directory to load certain DLLs. If a user is directed to place a crafted DLL with the installer, an arbitrary code may be executed with the administrator privilege.

Affected Software

VendorProductVersion RangeStatus
RATOC Systems, Inc.RATOC RAID Monitoring Manager for Windowsprior to 2.00.009.260220affected

Weaknesses

  • CWE-427: Uncontrolled Search Path Element

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References