VULNERABILITY INTELLIGENCE
CVE-2026-7279
CVSS score7.8 HIGH
EPSS probability0.11%
CISA KEVNot currently listed
Published2026-04-28
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
AVACAST developed by eMPIA Technology, has a DLL Hijacking vulnerability, allowing authenticated local attackers to place a malicious DLL in a specific directory, resulting in arbitrary code execution with system privileges when the system loads the DLL.
Weakness classification
- twcert@cert.org.tw: CWE-427