Skip to main content

Breaking cybersecurity news

Vulnerability database

EU vulnerability data

Hands-on web security training

Security incidents database

Knowledge library

Analytics & trends

Follow us

Professional cybersecurity intelligence

Breaking cybersecurity news

Vulnerability database

EU vulnerability data

Hands-on web security training

Security incidents database

Knowledge library

Analytics & trends

Follow us

About Sources Sponsored Articles Status Legal Terms

v2.3.4•© 2026

Telegram Bluesky GitHub Contact

Return to CVE list

CVE-2026-26034

CVE-2026-26034

8.5

High

Published:5 Mar 2026

Last updated:17 Jun 2026

Source:vultures@jpcert.or.jp

Analyzed

Weakness (CWE)

CWE-276Incorrect Default Permissions
CWE-428CWE-428

CVSS Vector

v4.0

Attack Vector: Local
Attack Complexity: Low
Attack Requirements: None
Privileges Required: None
User Interaction: Passive
Confidentiality (Vulnerable): High
Integrity (Vulnerable): High
Availability (Vulnerable): High
Confidentiality (Subsequent): None
Integrity (Subsequent): None
Availability (Subsequent): None

View on MITRE Find PoC on GitHub

Description

UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Incorrect Default Permissions (CWE-276) vulnerability that allows an attacker to execute arbitrary code with SYSTEM privileges by causing the application to load a specially crafted DLL.

References

vultures@jpcert.or.jp

https://jvn.jp/en/jp/JVN56544509/

vultures@jpcert.or.jp

https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=038h3