{"id":"CVE-2026-116596","state":"PUBLISHED","title":"CVE-2026-116596","description":"Pyrus Sync for Windows contains a local privilege escalation vulnerability caused by missing authorization controls in its PyrusSyncService Windows service, which allow an attacker with unprivileged access to create files using the ISyncService contract.","publishedAt":"2026-10-26T16:17:29.178Z","updatedAt":"2026-10-26T16:17:29.178Z","severity":null,"assigner":"certcc","products":["Pyrus Pyrus Sync"],"affected":[{"vendor":"Pyrus","product":"Pyrus Sync","versions":[{"version":"0","status":"affected","lessThan":"1.8.745.0","versionType":"custom"}]}],"references":["https://pyrus.com/en/pyrus-sync","https://medium.com/@alisaifeldin/cve-2026-116596-local-privilege-escalation-in-pyrus-sync-for-windows-0fe2417dc8cf"],"weaknesses":[],"ingestedAt":"2026-10-29T20:10:43.281Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/116xxx/CVE-2026-116596.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-116596","state":"PUBLISHED","datePublished":"2026-10-26T16:17:29.178Z","dateUpdated":"2026-10-26T16:17:29.178Z","assignerShortName":"certcc","assignerOrgId":"37e5125f-f79b-445b-8fad-9564f167944b","dateReserved":"2026-10-26T15:18:49.651Z"},"containers":{"cna":{"title":"CVE-2026-116596","descriptions":[{"lang":"en","value":"Pyrus Sync for Windows contains a local privilege escalation vulnerability caused by missing authorization controls in its PyrusSyncService Windows service, which allow an attacker with unprivileged access to create files using the ISyncService contract."}],"affected":[{"vendor":"Pyrus","product":"Pyrus Sync","versions":[{"version":"0","status":"affected","lessThan":"1.8.745.0","versionType":"custom"}]}],"references":[{"url":"https://pyrus.com/en/pyrus-sync"},{"url":"https://medium.com/@alisaifeldin/cve-2026-116596-local-privilege-escalation-in-pyrus-sync-for-windows-0fe2417dc8cf"}],"problemTypes":[{"descriptions":[{"lang":"en","description":"CWE-266: Incorrect Privilege Assignment"}]}],"providerMetadata":{"shortName":"certcc","orgId":"37e5125f-f79b-445b-8fad-9564f167944b","dateUpdated":"2026-10-26T16:17:29.178Z"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"VINCE 3.0.51","env":"prod","origin":"https://cveawg.mitre.org/api/cve/CVE-2026-116596"}}}}}