Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-116596

CVE-2026-116596

Description

Pyrus Sync for Windows contains a local privilege escalation vulnerability caused by missing authorization controls in its PyrusSyncService Windows service, which allow an attacker with unprivileged access to create files using the ISyncService contract.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Pyrus Pyrus Sync

  • 0 to < 1.8.745.0affected

References