VULNERABILITY INTELLIGENCE

CVE-2020-36933

CVSS score8.5 HIGH

EPSS probability0.17%

CISA KEVNot currently listed

Published2026-01-25

Last modified2026-06-17

Description

HTC IPTInstaller 4.0.9 contains an unquoted service path vulnerability in the PassThru Service configuration. Attackers can exploit the unquoted binary path to inject and execute malicious code with elevated LocalSystem privileges.