VULNERABILITY INTELLIGENCE
CVE-2026-8797
EPSS probability0.15%
CISA KEVNot currently listed
Published2026-06-26
Last modified2026-10-25
Description
An access control deficiency vulnerability exists in ExpressUpdate Agent for Windows. If a malicious user gains access to the product, arbitrary code could be executed with SYSTEM privileges.
Weakness classification
- psirt-info@cyber.jp.nec.com: CWE-782