VULNERABILITY INTELLIGENCE
CVE-2026-6348
CVSS score8.8 HIGH
EPSS probability0.18%
CISA KEVNot currently listed
Published2026-04-16
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Description
WinMatrix agent developed by Simopro Technology has a Missing Authentication vulnerability, allowing authenticated local attackers to execute arbitrary code with SYSTEM privileges on the local machine as well as on all hosts within the environment where the agent is installed.
Weakness classification
- twcert@cert.org.tw: CWE-306